{"data":{"id":"777bfe88-cb8c-42f3-86c9-d224a2f9804f","title":"GHSA-fvfv-ppw4-7h2w: n8n has a Guardrail Node Bypass","summary":"GHSA-fvfv-ppw4-7h2w describes a bypass of the default guardrail instructions in n8n's Guardrail node. An end user interacting with a workflow that uses the node could craft an input that gets past those instructions.","solution":"Fixed in n8n version 2.10.0. Users should upgrade to this version or later. If upgrading is not immediately possible, limit access to trusted users and review the practical impact of guardrail bypasses in the use case, adjusting the workflow accordingly. The source states these workarounds do not fully remediate the risk and should only be used as short-term measures.","labels":["security","safety"],"sourceUrl":"https://github.com/advisories/GHSA-fvfv-ppw4-7h2w","publishedAt":"2026-02-26T22:46:42.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["jailbreak"],"issueType":"vulnerability","affectedPackages":["n8n@< 2.10.0 (fixed: 2.10.0)"],"affectedPackageNames":["n8n"],"affectedPackageRefs":["npm:n8n"],"affectedVendors":[],"affectedVendorsRaw":["n8n Guardrail node"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-fvfv-ppw4-7h2w"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":null,"fixReleasedAt":"2026-02-23T16:10:02.939Z","daysToFix":-3,"fixCheckedAt":"2026-10-29T21:40:27.333Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["safety"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0054"],"fixes":[{"ecosystem":"npm","name":"n8n","fixedVersion":"2.10.0","matchedVersion":"2.10.0","fixReleasedAt":"2026-02-23T16:10:02.939Z","daysToFix":-3,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:40:27.186Z"}]}}