Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.9
n8n can run unauthorized code via vm2 sandbox
published 9 days ago
Summary
The n8n workflow automation tool uses the vm2 library, and versions of vm2 older than 3 contain a weakness that could let a malicious user execute code outside the intended sandbox. This could let an attacker run actions on your server that they should not be able to. Update vm2 to version 3 or later (or upgrade n8n to a version that includes the newer vm2) to close the risk.
What to do
- Update cleanstart n8n to version 2.28.0-r5.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | n8n |
< 2.28.0-r5 Fix: upgrade to 2.28.0-r5
|
Original advisory text
vm2 before 3
Security vulnerability affects the n8n package. vm2 before 3.
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Timeline
Published10 Oct 2026
Updated10 Oct 2026
First seen10 Oct 2026
Sources
CLEANSTART-2026-DN17420 · OSV
Track software like this
Free during beta