- n8n fixed a high-severity sandbox escape (CVSS 8.7) in versions 2.31.5 and 2.32.1 that could allow authenticated workflow editors to execute OS commands on the server.
- Security Joes discovered the bypass while testing n8n’s February patch for CVE-2026-27577, exploiting an arrow-function gap and
Reflect.get()to reach real Node.js globals. - Exploitation requires a valid account with workflow-edit permissions and may expose encryption keys, stored credentials, and connected internal services; no active exploitation has been reported yet.
n8n has patched a high-severity expression-sandbox escape that lets an authenticated workflow editor execute operating-system commands on the server running the automation platform, according to a security advisory. Security Joes found the flaw while probing n8n’s February fix for CVE-2026-27577 for another bypass, as detailed in a report shared with The Hacker News.
The affected ranges are versions below 2.31.5 and between 2.32.0 and 2.32.1. n8n rates the issue as High with a CVSS 4.0 score of 8.7, and no CVE had been assigned as of July 27, 2026. Administrators should update rather than rely on n8n’s interim guidance to restrict instance access and workflow editing to fully trusted users.
Exploitation requires a valid account with permission to create or modify workflows and does not require action from another user. A successful exploit executes commands with the privileges of the n8n process, potentially exposing the N8N_ENCRYPTION_KEY and allowing decryption of stored credentials.
Security Joes discovered that in version 2.31.4, the VariablePolyfill.ts handler placed ArrowFunctionExpression in an explicit no-op branch, enabling a concise arrow body such as () => process to resolve to the real Node.js global. Separately, n8n’s property checks inspect static property names in member expressions, but Reflect.get() receives the property as a function argument, allowing recovery of process.getBuiltinModule to load child_process and run a host command.
The fixed rewriter adds a dedicated ArrowFunctionExpression handler that routes a bare identifier in a concise arrow body through the data context. Security Joes’ research team stated: “Neither alone is sufficient. Neither was covered by tests.”
Researchers identified the residual escape on July 14 and reported it through n8n’s vulnerability disclosure program on July 15, with fixed releases published on July 22. Defenders should review recently created workflows for unexpected arrow functions and hunt for shells spawned as children of the n8n process, rotating credentials where suspicious activity is found.
The finding extends a series of expression-sandbox escapes n8n has patched since 2025, following CVE-2026-27577, a 9.4-rated escape fixed in February after researchers found the process object slipped through the same identifier-rewriting layer. In affected deployments storing broadly privileged credentials or reaching sensitive internal systems, an attacker with a workflow-edit account can execute commands as the n8n process.
✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.
Previous Articles:
- SpaceX QQQ weight to rise as lockup expires, float triples
- Strategy Adds $525M to Reserve, Halts Bitcoin Buys for Fifth Week
- Nvidia unveils AI defense coalition; Meta absent as founding member
- EU adds 15 crypto firms, including BNY Mellon unit, to MiCA register
- East Asia hackers target Middle East govts with new Telegram malware
