{"data":{"id":"f340354a-b790-4521-875f-be59d481a1c8","title":"GHSA-hx4h-vr3m-45vh: n8n: Prototype Pollution via VM Expression Engine Sandbox Escape Leads to Denial of Service","summary":"An authenticated user who can create or edit a workflow expression can abuse array-element access in n8n's VM expression engine to reach a host built-in and pollute its prototype in the main n8n process, causing a denial of service. Both self-hosted and cloud instances running the VM expression engine are affected.","solution":"Fixed in n8n versions 1.123.67, 2.31.5, and 2.32.1; upgrade to one of these or later. If upgrading is not immediately possible: restrict n8n instance access to fully trusted users only, and disable the VM expression engine if an alternative is available for the deployment. These workarounds do not fully remediate the risk and are short-term measures only.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-hx4h-vr3m-45vh","publishedAt":"2026-07-22T22:13:04.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["n8n@>= 2.0.0-rc.0, < 2.31.5 (fixed: 2.31.5)","n8n@>= 2.32.0, < 2.32.1 (fixed: 2.32.1)","n8n@< 1.123.67 (fixed: 1.123.67)"],"affectedPackageNames":["n8n"],"affectedPackageRefs":["npm:n8n"],"affectedVendors":[],"affectedVendorsRaw":["n8n"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-hx4h-vr3m-45vh"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-07-22T22:13:04.000Z","fixReleasedAt":"2026-07-22T10:18:23.590Z","daysToFix":0,"fixCheckedAt":"2026-10-29T21:32:48.812Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["availability"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"n8n","fixedVersion":"2.31.5","matchedVersion":"2.31.5","fixReleasedAt":"2026-07-22T10:24:16.316Z","daysToFix":0,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:32:48.659Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"2.32.1","matchedVersion":"2.32.1","fixReleasedAt":"2026-07-22T10:18:23.590Z","daysToFix":0,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:32:48.659Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"1.123.67","matchedVersion":"1.123.67","fixReleasedAt":"2026-07-22T10:19:44.229Z","daysToFix":0,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:32:48.659Z"}]}}