CVE-2026-72765 in n8n
Zusammenfassung
von MITRE • 11.08.2026
n8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerability in expression evaluation. An authenticated user with permission to create or modify workflows can craft expressions using arrow-function bodies to bypass the expression sandbox, triggering system command execution on the host running n8n. The issue is fixed in versions 2.31.5 and 2.32.1.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.