GHSA-gv7g-jm28-cr3m: n8n: Expression sandbox escape via arrow-function bodies enabling command execution

Summary

GHSA-gv7g-jm28-cr3m affects n8n. An authenticated user with permission to create or modify workflows can craft expressions using arrow functions that bypass the expression sandbox. This triggers unintended system command execution on the host running n8n.

Mitigation

Fixed in n8n versions 2.31.5 and 2.32.1. Upgrade to one of these versions or later. If upgrading is not immediately possible, restrict n8n instance access and workflow creation and editing permissions to fully trusted users only. These workarounds do not fully remediate the risk and should be used only as short-term measures.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• n8nnpmLLM dependency since 2026-02-10

Related items

• MediumCVE-2026-127202: MLflow path traversal through model_id in the log outputs APISimilar attack · NVD/CVE Database
• LowAI chatbots are recommending fake retail websites, study findsSimilar attack · The Verge (AI)
• MediumPalo Alto tracks a massive Chinese AI attack that sadly lives up to industry fearsSimilar attack · CSO Online
• MediumAttackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society SectorsSimilar attack · Palo Alto Unit 42
• MediumCVE-2026-126994: braindecode model config deserialization flaw via activation argumentSimilar attack · NVD/CVE Database