Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-86076: n8n allows attacker to run code on server

CVE-2026-86076 · published 1 month ago

Summary

Versions of n8n before 1.123.76, 2.37.7, and 2.38.2 could be tricked into running hidden code when processing certain workflow expressions. This could let a malicious user execute commands on your backend or run scripts in the editor preview. Update n8n to at least the listed fixed versions to close the risk.

What to do

Update n8n to version 1.123.76.
Update n8n to version 2.38.2.
Update n8n to version 2.37.7.
Update n8n to version 2.19.3-aikido.10.
Update rootio @rootio/n8n to version 2.19.3-root.io.10.
Update n8n to version 2.19.3-aikido.11.
Update rootio @rootio/n8n to version 2.19.3-root.io.11.
Update n8n to version 2.19.3-aikido.13.
Update rootio @rootio/n8n to version 2.19.3-root.io.13.
Update n8n to version 2.19.3-aikido.14.
Update rootio @rootio/n8n to version 2.19.3-root.io.14.
Update n8n to version 2.19.3-aikido.15.
Update rootio @rootio/n8n to version 2.19.3-root.io.15.

Affected software

Ecosystem	Vendor	Product	Affected versions
npm	–	n8n	< 1.123.76 >= 2.38.0, < 2.38.2 >= 2.0.0, < 2.37.7 Fix: upgrade to 1.123.76
–	n8n	n8n	< 1.123.76 >= 2.0.0, < 2.37.7 >= 2.38.0, < 2.38.2 `cpe:2.3:a:n8n:n8n::::::node.js::*`
Root:npm	–	n8n	< 2.19.3-aikido.10 < 2.19.3-aikido.11 < 2.19.3-aikido.13 < 2.19.3-aikido.14 < 2.19.3-aikido.15 Fix: upgrade to 2.19.3-aikido.10
Root:npm	rootio	@rootio/n8n	< 2.19.3-root.io.10 < 2.19.3-root.io.11 < 2.19.3-root.io.13 < 2.19.3-root.io.14 < 2.19.3-root.io.15 Fix: upgrade to 2.19.3-root.io.10

Original advisory text

CVE-2026-86076 in n8n - Patched by Root

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the expression compiler sanitizer resolved through dynamically scoped this and did not reject reserved class member names. A class field named __sanitize could rebind the sanitizer and reach the Function constructor, enabling backend code execution and editor-preview JavaScript execution. The affected AST hook is PrototypeSanitizer in packages/workflow/src/expression-sandboxing.ts. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.

References

https://github.com/n8n-io/n8n/releases/tag/[email protected] Release Notes
https://github.com/n8n-io/n8n/releases/tag/[email protected] Release Notes
https://github.com/n8n-io/n8n/releases/tag/[email protected] Release Notes
https://github.com/n8n-io/n8n/security/advisories/GHSA-hw8v-xxg5-vvvx Mitigation Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-86076
https://github.com/advisories/GHSA-hw8v-xxg5-vvvx
https://github.com/n8n-io/n8n Product
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/86xxx/CVE-2026-86076... Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

8.7 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-94Code Injection

Timeline

Published8 Sep 2026

Updated9 Oct 2026

First seen8 Sep 2026

Sources

CVE-2026-86076 · NVD

GHSA-hw8v-xxg5-vvvx · GHSA

GHSA-hw8v-xxg5-vvvx · OSV

CVE-2026-86076 · OSV

ROOT-APP-NPM-CVE-2026-86076 · OSV

Track software like this

Free during beta