Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.7

n8n lets attackers run code remotely

CVE-2026-85169 · published 1 month ago
Summary

Versions of n8n before the latest release let a user who can design workflows insert special commands that bypass safety checks. This can let an attacker execute any code on the server, potentially taking control of the system. Upgrade n8n to the newest version as soon as possible to close the gap.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
n8n-io n8n < 1.123.73
< 2.36.2
< 2.35.4
n8n n8n < 1.123.73
>= 2.0.0, < 2.35.4
>= 2.36.0, < 2.36.2
cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*
Original advisory text
n8n before 1.123.73 Remote Code Execution via $fromAI Prototype Leak
n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the $fromAI handler. $fromAI resolved a caller-supplied placeholder name without requiring it to be an own property and admitted reserved keys; against a primitive input value it returned a live host-prototype reference. An attacker with workflow-build privilege can walk the prototype chain to the Function constructor and compile/execute arbitrary code in the main n8n process, leading to remote code execution.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.7 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-94Code Injection
Timeline
Published3 Sep 2026
Updated12 Oct 2026
First seen3 Sep 2026
Sources
CVE-2026-85169 · NVD
CVE-2026-85169 · MITRE
CVE-2026-85169 · OSV
GHSA-9x83-43r8-5hwc · GHSA
Track software like this
Free during beta