PT-2026-85001 · N8N · N8N
CVSS v4.0
8.7
High
| Vector | AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
n8n versions prior to 1.123.73
n8n versions prior to 2.35.4
n8n versions prior to 2.36.2
Description
An expression sandbox escape exists in the
$fromAI handler. The $fromAI handler resolved caller-supplied placeholder names without verifying if they were own properties and allowed reserved keys. When used against a primitive input value, it returned a live host-prototype reference. An attacker with workflow-build privileges can exploit this by walking the prototype chain to the Function constructor to compile and execute arbitrary code within the main n8n process, resulting in remote code execution.Recommendations
Update n8n to version 1.123.73 or later.
Update n8n to version 2.35.4 or later.
Update n8n to version 2.36.2 or later.
Exploit
Fix
RCE
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
N8N