CVE-2026-72765

n8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerability in expression evaluation. An authenticated user with permission to create or modify workflows can craft expressions using arrow-function bodies to bypass the expression sandbox, triggering system command execution on the host running n8n. The issue is fixed in versions 2.31.5 and 2.32.1.

CVSS v3 9.9 CRITICAL

9.9^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.1 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://github.com/n8n-io/n8n/security/advisories/GHSA-gv7g-jm28-cr3m	Mitigation Vendor Advisory
https://www.vulncheck.com/advisories/n8n-before-remote-code-execution-via-expression-sandbox-escape	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:n8n:n8n::::::node.js::*
	cpe:2.3:a:n8n:n8n:2.32.0:::::node.js::

History

23 Oct 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) n8n antes de 2.31.5 y antes de 2.32.1 contienen una vulnerabilidad de escape de sandbox en la evaluación de expresiones. Un usuario autenticado con permiso para crear o modificar flujos de trabajo puede elaborar expresiones utilizando cuerpos de funciones flecha para eludir el sandbox de expresiones, desencadenando la ejecución de comandos del sistema en el host que ejecuta n8n. El problema está solucionado en las versiones 2.31.5 y 2.32.1.

Information

Published : 2026-08-11 13:19

Updated : 2026-10-29 20:17

NVD link : CVE-2026-72765

Mitre link : CVE-2026-72765

CVE.ORG link : CVE-2026-72765

JSON object : View

Products Affected

n8n

n8n

CWE

CWE-94

Improper Control of Generation of Code ('Code Injection')

{"id": "CVE-2026-72765", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-72765", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-11T17:44:22.147940Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.9, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 3.1}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.7, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"vendor": "n8n-io", "product": "n8n", "versions": [{"status": "affected", "version": "2.32.0", "lessThan": "2.32.1", "versionType": "semver"}, {"status": "unaffected", "version": "2.32.1", "versionType": "semver"}], "packageURL": "pkg:npm/n8n", "defaultStatus": "unaffected"}, {"vendor": "n8n-io", "product": "n8n", "versions": [{"status": "affected", "version": "0", "lessThan": "2.31.5", "versionType": "semver"}, {"status": "unaffected", "version": "2.31.5", "versionType": "semver"}], "packageURL": "pkg:npm/n8n", "defaultStatus": "unaffected"}]}], "published": "2026-08-11T13:19:06.670", "references": [{"url": "https://github.com/n8n-io/n8n/security/advisories/GHSA-gv7g-jm28-cr3m", "tags": ["Mitigation", "Vendor Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/n8n-before-remote-code-execution-via-expression-sandbox-escape", "tags": ["Third Party Advisory"], "source": "disclosure@vulncheck.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "n8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerability in expression evaluation. An authenticated user with permission to create or modify workflows can craft expressions using arrow-function bodies to bypass the expression sandbox, triggering system command execution on the host running n8n. The issue is fixed in versions 2.31.5 and 2.32.1."}, {"lang": "es", "value": "n8n antes de 2.31.5 y antes de 2.32.1 contienen una vulnerabilidad de escape de sandbox en la evaluaci\u00f3n de expresiones. Un usuario autenticado con permiso para crear o modificar flujos de trabajo puede elaborar expresiones utilizando cuerpos de funciones flecha para eludir el sandbox de expresiones, desencadenando la ejecuci\u00f3n de comandos del sistema en el host que ejecuta n8n. El problema est\u00e1 solucionado en las versiones 2.31.5 y 2.32.1."}], "lastModified": "2026-10-29T20:17:34.257", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*", "vulnerable": true, "matchCriteriaId": "9834D769-4344-496B-8E27-78FC32EA8E76", "versionEndExcluding": "2.31.5", "versionStartIncluding": "2.31.0"}, {"criteria": "cpe:2.3:a:n8n:n8n:2.32.0:*:*:*:*:node.js:*:*", "vulnerable": true, "matchCriteriaId": "4AC4E002-974B-4748-A5CB-F8A40E4F3B24"}], "operator": "OR"}]}], "sourceIdentifier": "disclosure@vulncheck.com"}