{"data":{"id":"3377ae66-9b97-40b5-a22a-3c69a2b9c3f4","title":"GHSA-vpcf-gvg4-6qwr: n8n: Expression Sandbox Escape Leads to RCE","summary":"Additional expression-evaluation exploits in n8n, following CVE-2025-68613, allow an authenticated user with workflow create or modify permission to run unintended system commands on the host running n8n. The attacker crafts expressions in workflow parameters to trigger this.","solution":"Fixed in n8n versions 2.10.1, 2.9.3, and 1.123.22; upgrade to one of these or later. If upgrading is not immediately possible, limit workflow creation and editing permissions to fully trusted users only, and deploy n8n in a hardened environment with restricted operating system privileges and network access. These workarounds do not fully remediate the risk and are short-term measures only.","labels":["security","industry"],"sourceUrl":"https://github.com/advisories/GHSA-vpcf-gvg4-6qwr","publishedAt":"2026-02-25T22:05:09.000Z","cveId":"CVE-2026-27577","cweIds":null,"cvssScore":null,"cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["n8n@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","n8n@>= 2.0.0, < 2.9.3 (fixed: 2.9.3)","n8n@< 1.123.22 (fixed: 1.123.22)"],"affectedPackageNames":["n8n"],"affectedPackageRefs":["npm:n8n"],"affectedVendors":[],"affectedVendorsRaw":["n8n"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.10725,"epssCheckedAt":"2026-11-04T06:10:13.820Z","kevDateAdded":null,"advisoryAliases":["GHSA-vpcf-gvg4-6qwr"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":null,"fixReleasedAt":"2026-02-25T08:17:05.836Z","daysToFix":0,"fixCheckedAt":"2026-10-29T21:40:32.146Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"n8n","fixedVersion":"1.123.22","matchedVersion":"1.123.22","fixReleasedAt":"2026-02-25T11:24:04.313Z","daysToFix":0,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:40:31.998Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"2.9.3","matchedVersion":"2.9.3","fixReleasedAt":"2026-02-25T10:27:21.887Z","daysToFix":0,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:40:31.998Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"2.10.1","matchedVersion":"2.10.1","fixReleasedAt":"2026-02-25T08:17:05.836Z","daysToFix":0,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:40:31.998Z"}]}}