CyberRota Analysis
AI-GeneratedVersions of n8n prior to 1.123.73, 2.35.4, and 2.36.2 are vulnerable due to an expression sandbox escape in the $fromAI handler, allowing attackers with workflow-build privileges to exploit prototype chain traversal. This vulnerability can lead to remote code execution by enabling the execution of arbitrary code within the n8n process. Organizations using affected n8n versions should prioritize patching to mitigate the risk of potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the $fromAI handler. $fromAI resolved a caller-supplied placeholder name without requiring it to be an own property and admitted reserved keys; against a primitive input value it returned a live host-prototype reference. An attacker with workflow-build privilege can walk the prototype chain to the Function constructor and compile/execute arbitrary code in the main n8n process, leading to remote code execution.