Th3-J0K3R

**Name of the Vulnerable Software and Affected Versions** n8n versions prior to 2.36.2 **Description** An expression sandbox bypass allows authenticated users with workflow-edit permissions to mutate host objects through expression evaluation. This occurs because free identifiers in spread, computed-key, switch-case, or class-extension positions resolve against process globals. These changes persist across the entire process until the system is restarted. **Recommendations** Update to version 2.36.2 or later.