{"data":{"id":"bdd7670e-1015-4e34-adaf-d3734f157839","title":"GHSA-gv7g-jm28-cr3m: n8n: Expression sandbox escape via arrow-function bodies enabling command execution","summary":"n8n, a workflow automation tool, has a vulnerability where authenticated users can bypass the expression sandbox (a security boundary that restricts what code can do) using arrow functions to execute system commands on the host computer. This affects n8n versions before 2.31.5 and 2.32.1.","solution":"Upgrade to n8n version 2.31.5 or 2.32.1 or later. If upgrading immediately is not possible, administrators can temporarily restrict n8n instance access to fully trusted users only and restrict workflow creation and editing permissions to fully trusted users only, though these workarounds do not fully remediate the risk.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-gv7g-jm28-cr3m","publishedAt":"2026-07-22T22:10:15.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["n8n@< 2.31.5 (fixed: 2.31.5)","n8n@>= 2.32.0, < 2.32.1 (fixed: 2.32.1)"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["n8n"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":true,"disclosureDate":"2026-07-22T22:10:15.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","availability"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}