{"data":{"id":"6116b75c-12e8-49b5-8395-466e4524abda","title":"GHSA-jjpj-p2wh-qf23: n8n has a Sandbox Escape in its JavaScript Task Runner","summary":"GHSA-jjpj-p2wh-qf23 is a sandbox escape in the JavaScript Task Runner of n8n. An authenticated user with permission to create or modify workflows can exploit it to execute arbitrary code outside the sandbox boundary, which on internal Task Runners (default runner mode) can fully compromise the n8n host. Task Runners must be enabled with N8N_RUNNERS_ENABLED=true for the issue to apply.","solution":"Fixed in n8n versions 2.10.1, 2.9.3, and 1.123.22; upgrade to one of these versions or later. If upgrading is not immediately possible, limit workflow creation and editing permissions to fully trusted users only, and use external runner mode (N8N_RUNNERS_MODE=external) to limit the blast radius. These workarounds do not fully remediate the risk and are short-term measures only.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-jjpj-p2wh-qf23","publishedAt":"2026-02-25T21:23:15.000Z","cveId":"CVE-2026-27495","cweIds":null,"cvssScore":null,"cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["n8n@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","n8n@>= 2.0.0, < 2.9.3 (fixed: 2.9.3)","n8n@< 1.123.22 (fixed: 1.123.22)"],"affectedPackageNames":["n8n"],"affectedPackageRefs":["npm:n8n"],"affectedVendors":[],"affectedVendorsRaw":["n8n"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00794,"epssCheckedAt":"2026-11-04T06:10:15.563Z","kevDateAdded":null,"advisoryAliases":["GHSA-jjpj-p2wh-qf23"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":null,"fixReleasedAt":"2026-02-25T08:17:05.836Z","daysToFix":0,"fixCheckedAt":"2026-10-29T21:40:32.890Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.7,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"n8n","fixedVersion":"1.123.22","matchedVersion":"1.123.22","fixReleasedAt":"2026-02-25T11:24:04.313Z","daysToFix":0,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:40:32.742Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"2.10.1","matchedVersion":"2.10.1","fixReleasedAt":"2026-02-25T08:17:05.836Z","daysToFix":0,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:40:32.742Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"2.9.3","matchedVersion":"2.9.3","fixReleasedAt":"2026-02-25T10:27:21.887Z","daysToFix":0,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:40:32.742Z"}]}}