GHSA-fvfv-ppw4-7h2w: n8n has a Guardrail Node Bypass

Summary

GHSA-fvfv-ppw4-7h2w describes a bypass of the default guardrail instructions in n8n's Guardrail node. An end user interacting with a workflow that uses the node could craft an input that gets past those instructions.

Mitigation

Fixed in n8n version 2.10.0. Users should upgrade to this version or later. If upgrading is not immediately possible, limit access to trusted users and review the practical impact of guardrail bypasses in the use case, adjusting the workflow accordingly. The source states these workarounds do not fully remediate the risk and should only be used as short-term measures.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• n8nnpmDeclares an LLM dependency

Related items

• MediumResearchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak ToolkitSimilar attack · The Hacker News
• MediumCritical Langflow flaws enable authentication bypass and RCESimilar attack · CSO Online
• MediumFree the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak BundlesSimilar attack · Check Point Research
• InfoTraceRouter++: Causal Semantic Routing Realignment via Optimal TransportSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoCrowdStrike to Acquire Dreadnode to Bring Automated AI Security Testing to the Falcon PlatformSimilar attack · CrowdStrike Blog