CyberRota Analysis
AI-GeneratedA sandbox escape vulnerability in n8n allows authenticated users with workflow modification permissions to execute arbitrary system commands on the host by crafting specific expressions. This poses a high risk, as it can lead to unauthorized access and control over the system. Organizations using n8n prior to versions 2.31.5 and 2.32.1 should prioritize updating their installations to mitigate this critical security threat.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
n8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerability in expression evaluation. An authenticated user with permission to create or modify workflows can craft expressions using arrow-function bodies to bypass the expression sandbox, triggering system command execution on the host running n8n. The issue is fixed in versions 2.31.5 and 2.32.1.