Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.4
n8n: Untrusted Users Can Execute System Commands
CVE-2026-27577
GHSA-vpcf-gvg4-6qwr
Summary
A security update is available for n8n, a workflow automation tool. An attacker with certain permissions could potentially execute system commands on the host machine by crafting malicious expressions. To fix this, update to n8n version 2.10.1 or later. If an update is not possible, limit user permissions and deploy n8n in a restricted environment to reduce the risk.
What to do
- Update GitHub Actions n8n to version 1.123.22.
- Update GitHub Actions n8n to version 2.9.3.
- Update GitHub Actions n8n to version 2.10.1.
Affected software
| Vendor | Product | Affected versions | Fix available |
|---|---|---|---|
| GitHub Actions | n8n | <= 1.123.22 | 1.123.22 |
| GitHub Actions | n8n | > 2.0.0 , <= 2.9.3 | 2.9.3 |
| GitHub Actions | n8n | > 2.10.0 , <= 2.10.1 | 2.10.1 |
| n8n | n8n | <= 1.123.22 | – |
| n8n | n8n | > 2.0.0 , <= 2.9.3 | – |
| n8n | n8n | > 2.10.0 , <= 2.10.1 | – |
Original title
n8n: Expression Sandbox Escape Leads to RCE
Original description
## Impact
Additional exploits in the expression evaluation of n8n have been identified and patched following [CVE-2025-68613](https://github.com/n8n-io/n8n/security/advisories/GHSA-v98v-ff95-f3cp).
An authenticated user with permission to create or modify workflows could abuse crafted expressions in workflow parameters to trigger unintended system command execution on the host running n8n.
## Patches
The issues have been fixed in n8n versions 2.10.1, 2.9.3, and 1.123.22. Users should upgrade to one of these versions or later to remediate all known vulnerabilities.
## Workarounds
If upgrading is not immediately possible, administrators should consider the following temporary mitigations:
- Limit workflow creation and editing permissions to fully trusted users only.
- Deploy n8n in a hardened environment with restricted operating system privileges and network access to reduce the impact of potential exploitation.
These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.
### Resources
- Best practices for [securing n8n](https://docs.n8n.io/hosting/securing/overview/)
- Initial vulnerability advisory: [CVE-2025-68613](https://github.com/n8n-io/n8n/security/advisories/GHSA-v98v-ff95-f3cp)
Additional exploits in the expression evaluation of n8n have been identified and patched following [CVE-2025-68613](https://github.com/n8n-io/n8n/security/advisories/GHSA-v98v-ff95-f3cp).
An authenticated user with permission to create or modify workflows could abuse crafted expressions in workflow parameters to trigger unintended system command execution on the host running n8n.
## Patches
The issues have been fixed in n8n versions 2.10.1, 2.9.3, and 1.123.22. Users should upgrade to one of these versions or later to remediate all known vulnerabilities.
## Workarounds
If upgrading is not immediately possible, administrators should consider the following temporary mitigations:
- Limit workflow creation and editing permissions to fully trusted users only.
- Deploy n8n in a hardened environment with restricted operating system privileges and network access to reduce the impact of potential exploitation.
These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.
### Resources
- Best practices for [securing n8n](https://docs.n8n.io/hosting/securing/overview/)
- Initial vulnerability advisory: [CVE-2025-68613](https://github.com/n8n-io/n8n/security/advisories/GHSA-v98v-ff95-f3cp)
nvd CVSS3.1
9.9
nvd CVSS4.0
9.4
Vulnerability type
CWE-94
Code Injection
- https://nvd.nist.gov/vuln/detail/CVE-2026-27577
- https://github.com/advisories/GHSA-vpcf-gvg4-6qwr
- https://docs.n8n.io/hosting/securing/overview Not Applicable
- https://github.com/n8n-io/n8n/commit/1479aab2d32fe0ee087f82b9038b1035c98be2f6 Patch
- https://github.com/n8n-io/n8n/commit/9e5212ecbc5d2d4e6f340b636a5e84be6369882e Patch
- https://github.com/n8n-io/n8n/security/advisories/GHSA-v98v-ff95-f3cp Not Applicable
- https://github.com/n8n-io/n8n/security/advisories/GHSA-vpcf-gvg4-6qwr Mitigation Vendor Advisory
Published: 25 Feb 2026 · Updated: 12 Mar 2026 · First seen: 6 Mar 2026