Skip to content
n8nGHSA-9cmh-xcqm-5hqr

n8n: Cross-Tenant Module-Cache Poisoning in the JS Task Runner

MediumCVE-2026-72764 · Published Jul 22, 2026 · updated Aug 12, 2026

GitHub advisory

Affected versions

PackageAffectedFixed in
n8n
npm
< 1.123.671.123.67
>= 2.32.0, < 2.32.12.32.1
>= 2.0.0-rc.0, < 2.31.52.31.5
Details and references

## Impact n8n's JavaScript task runner shared one module cache across all users' Code-node executions, so a user able to run a Code node could poison a cached module and alter other users' Code-node executions on the same runner, affecting their confidentiality, integrity, or availability. This is a cross-user isolation break within a single n8n instance. It does not constitute a sandbox escape or remote code execution. All multi-user n8n instances running the JS task runner with built-in or external modules enabled are affected. ## Patches The issue has been fixed in n8n versions 1.123.67, 2.31.5, and 2.32.1. Users should upgrade to one of these versions or later to remediate the vulnerability. ## Workarounds If upgrading is not immediately possible, administrators should consider the following temporary mitigations: - Restrict n8n instance access to fully trusted users only. - Disable built-in and external module access in Code nodes by unsetting `NODE_FUNCTION_ALLOW_BUILTIN` and `NODE_FUNCTION_ALLOW_EXTERNAL`, which removes the poisonable module surface. - Use the external runner mode with a dedicated runner per user or project if your deployment supports it. These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.

CVSS 4.0
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H
Severity from
GitHub (reviewed advisory)
Weakness
CWE-20
Also known as
CVE-2026-72764

More n8n advisories

All n8n
DateAdvisory
Jul 22n8n: AI Agents Project Viewer Privilege Escalation via run_node_tool
CVE-2026-65015Highfixed in 2.29.8, 2.30.1
Jul 22n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution
CVE-2026-65598Highfixed in 1.123.64, 2.29.8, 2.30.1
Jul 22n8n: DOM-Based XSS via Unsandboxed iframe srcdoc in HTML Preview
CVE-2026-65597Highfixed in 1.123.64, 2.29.8, 2.30.1
Jul 22n8n: Stored DOM XSS via Resource Locator `cachedResultUrl`
CVE-2026-65592Highfixed in 1.123.64, 2.29.8, 2.30.1
Jul 22n8n: Google Service Account Private Key Exposed in JWT Header
CVE-2026-65599Mediumfixed in 1.123.64, 2.29.8, 2.30.1
Jul 22n8n: Shared Credential Header Leak via HTTP Request Pagination Expression
CVE-2026-59209Highfixed in 1.123.61, 2.27.4, 2.28.1

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.