Which versions of n8n are affected by EUVD-2026-56144?

A code injection vulnerability in n8n workflow automation engine (CVE-2026-72765, CVSS 8.7) enables authenticated users with workflow editing permissions to execute arbitrary operating system…. A patch is available.

How to fix or mitigate EUVD-2026-56144?

Within 24 hours: Identify and inventory all n8n deployments with their versions; revoke workflow editing access from all non-administrative users as immediate containment; enable monitoring of n8n audit logs for suspicious workflow creation. Within 7 days: Audit personnel requiring workflow creation/modification and establish a restrictive list of approved administrators with override controls. Within 30 days: Upgrade all instances to version 2.31.5 or later (for pre-2.32 releases) or 2.32.1 or later (for 2.32.x branch), then restore workflow permissions only to approved administrators with logging enabled.

n8n EUVD-2026-56144

Q: What is the CVSS score of EUVD-2026-56144?

EUVD-2026-56144 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.4%.

| CVE-2026-72765 HIGH

Code Injection (CWE-94)

2026-08-11 VulnCheck

GHSA-32pm-g48p-fxhq

RCE Code Injection N8n N8N Io

8.7

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

9.9 CRITICAL

Sandbox escape crosses a defined security boundary into the host OS (S:C); PR:L reflects mandatory workflow-editor authentication; full C/I/A from arbitrary command execution.

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Patch available

Aug 11, 2026 - 13:17 EUVD

Source Code Evidence Fetched

Aug 11, 2026 - 12:50 vuln.today

Analysis Generated

Aug 11, 2026 - 12:50 vuln.today

CVE Published

Aug 11, 2026 - 12:17 cve.org

HIGH 8.7

DescriptionCVE.org

n8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerability in expression evaluation. An authenticated user with permission to create or modify workflows can craft expressions using arrow-function bodies to bypass the expression sandbox, triggering system command execution on the host running n8n. The issue is fixed in versions 2.31.5 and 2.32.1.

AnalysisAI

Expression sandbox escape in n8n's workflow engine allows any authenticated user with workflow creation or modification permissions to execute arbitrary operating system commands on the host running n8n. The flaw, classified as CWE-94 code injection, affects all npm releases of n8n-io/n8n prior to version 2.31.5 and all 2.32.x releases prior to 2.32.1. No public exploit has been identified at time of analysis, but the CVSS 4.0 score of 8.7 and the full confidentiality, integrity, and availability impact ratings reflect a genuine high-severity remote code execution primitive for any n8n deployment where workflow editing rights are not tightly controlled.

Technical ContextAI

n8n is an open-source, self-hostable workflow automation platform distributed via npm as n8n-io/n8n (CPE: cpe:2.3:a:n8n-io:n8n). Workflows in n8n can include dynamic expressions evaluated at runtime by an internal JavaScript sandbox engine, which is designed to prevent expression authors from accessing the underlying Node.js runtime or host OS. The root cause is CWE-94 (Improper Control of Generation of Code / Code Injection): the sandbox implementation fails to properly police JavaScript arrow-function body syntax, which provides a code path that bypasses the sandboxing boundary and reaches the Node.js process directly. Because n8n's server process runs with OS-level privileges on the host, successful sandbox escape translates directly into arbitrary system command execution, making this a full server-side RCE primitive reachable through the expression evaluator within any workflow a user is permitted to create or edit.

RemediationAI

Upgrade to n8n 2.31.5 if on the stable branch, or to 2.32.1 if on the 2.32.x branch; these are the two vendor-confirmed fixed versions per GHSA-gv7g-jm28-cr3m and the upstream fix commit f69dfc6dd2178a14ea1624d2e1d403c2e755042f. If immediate upgrade is not possible, the vendor advisory identifies two compensating controls: restrict the n8n instance to fully trusted users at the network or authentication layer (removing access for any untrusted principals), and remove or restrict workflow creation and editing permissions to only the minimum set of trusted users required. The advisory explicitly states that neither workaround fully remediates the risk and both should be treated as short-term measures only. Administrators of shared or multi-user n8n instances should treat this as urgent given that the exploit requires only a workflow-editor role, not an administrator account.