n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process

n8n has patched a high-severity expression-sandbox escape that could let an authenticated workflow editor execute operating-system commands on the server running the automation platform. Security Joes found the flaw while probing n8n’s February fix for CVE-2026-27577 for another bypass.

The affected ranges are <2.31.5 and >=2.32.0,<2.32.1. n8n fixed the flaw in versions 2.31.5 and

Source: The Hacker News

Tags:

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

AMD Ryzen AI Halo – $4k AI Dev Kit

AMD Ryzen AI Halo – $4k AI Dev Kit Source: Hacker News

Read More

Attack Update: Top 5 Attack-IPs auf doode.info – 23.07.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. Keine relevanten IPs erfasst (ruhig oder stark gefiltert). Mehr Live-Daten und die komplette Historie im /attacks/ Watchtower-Bereich

Read More

Attack Update: Top 5 Attack-IPs auf doode.info – 06.07.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 388 requests (recent log) 213.209.159.175 — 263 requests (recent log) 216.244.66.232 — 95 requests (recent

Read More