EUVD-2026-74280
GHSA-hw8v-xxg5-vvvx
Severity by source
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible expression editor with low-privilege auth; scope changes as backend RCE compromises host process and all integrated downstream credentials.
Primary rating from Vendor (github).
CVSS VectorVendor: github
Lifecycle Timeline
5DescriptionCVE.org
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the expression compiler sanitizer resolved through dynamically scoped this and did not reject reserved class member names. A class field named __sanitize could rebind the sanitizer and reach the Function constructor, enabling backend code execution and editor-preview JavaScript execution. The affected AST hook is PrototypeSanitizer in packages/workflow/src/expression-sandboxing.ts. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.
AnalysisAI
Remote code execution in n8n workflow automation platform prior to versions 1.123.76, 2.37.7, and 2.38.2 is achievable by any authenticated user who can author workflow expressions. The root cause is a sandbox escape in the PrototypeSanitizer AST hook: because the sanitizer references itself via dynamically scoped this, a crafted class field named __sanitize rebinds the sanitizer function, after which the expression freely invokes the JavaScript Function() constructor and executes arbitrary Node.js code on the backend. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an authenticated n8n account with permission to create or edit workflows and access the expression editor - any standard contributor or editor role satisfies this requirement, corresponding to PR:L in the CVSS vector. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 vector (AV:N/AC:L/AT:P/PR:L/UI:N, score 8.7) correctly characterizes a network-reachable, low-complexity exploit requiring low-privilege authentication with specific attack conditions (AT:P). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade n8n to version 1.123.76 (1.x branch), 2.37.7 (2.37.x branch), or 2.38.2 (2.38.x branch), as confirmed by the GitHub security advisory GHSA-hw8v-xxg5-vvvx and release tags at https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.76, https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7, and https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all n8n instances and current versions; prioritize this due to the well-documented nature of the escape technique and ease of exploitation by internal users, then restrict workflow authoring permissions to senior administrators as an interim control. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-94 – Code Injection
View allShare
External POC / Exploit Code
Leaving vuln.today