n8n: Expression Sandbox Escape Leads to RCE
Critical9.9CVE-2026-27577 · Published Feb 25, 2026 · updated Feb 28, 2026
## Impact Additional exploits in the expression evaluation of n8n have been identified and patched following [CVE-2025-68613](https://github.com/n8n-io/n8n/security/advisories/GHSA-v98v-ff95-f3cp). An authenticated user with permission to create or modify workflows could abuse crafted expressions in workflow parameters to trigger unintended system command execution on the host running n8n. ## Patches The issues have been fixed in n8n versions 2.10.1, 2.9.3, and 1.123.22. Users should upgrade to one of these versions or later to remediate all known vulnerabilities. ## Workarounds If upgrading is not immediately possible, administrators should consider the following temporary mitigations: - Limit workflow creation and editing permissions to fully trusted users only. - Deploy n8n in a hardened environment with restricted operating system privileges and network access to reduce the impact of potential exploitation. These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures. ### Resources - Best practices for [securing n8n](https://docs.n8n.io/hosting/securing/overview/) - Initial vulnerability advisory: [CVE-2025-68613](https://githu...
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| n8n npm | < 1.123.22 | 1.123.22 |
| >= 2.0.0, < 2.9.3 | 2.9.3 | |
| >= 2.10.0, < 2.10.1 | 2.10.1 |
Details and references
## Impact Additional exploits in the expression evaluation of n8n have been identified and patched following [CVE-2025-68613](https://github.com/n8n-io/n8n/security/advisories/GHSA-v98v-ff95-f3cp). An authenticated user with permission to create or modify workflows could abuse crafted expressions in workflow parameters to trigger unintended system command execution on the host running n8n. ## Patches The issues have been fixed in n8n versions 2.10.1, 2.9.3, and 1.123.22. Users should upgrade to one of these versions or later to remediate all known vulnerabilities. ## Workarounds If upgrading is not immediately possible, administrators should consider the following temporary mitigations: - Limit workflow creation and editing permissions to fully trusted users only. - Deploy n8n in a hardened environment with restricted operating system privileges and network access to reduce the impact of potential exploitation. These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures. ### Resources - Best practices for [securing n8n](https://docs.n8n.io/hosting/securing/overview/) - Initial vulnerability advisory: [CVE-2025-68613](https://github.com/n8n-io/n8n/security/advisories/GHSA-v98v-ff95-f3cp)
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-94
- Also known as
- CVE-2026-27577
- github.com/n8n-io/n8n/security/advisories/GHSA-v98v-ff95-f3cp
- github.com/n8n-io/n8n/security/advisories/GHSA-vpcf-gvg4-6qwr
- nvd.nist.gov/vuln/detail/CVE-2026-27577
- github.com/n8n-io/n8n/commit/1479aab2d32fe0ee087f82b9038b1035c98be2f6
- github.com/n8n-io/n8n/commit/9e5212ecbc5d2d4e6f340b636a5e84be6369882e
- docs.n8n.io/hosting/securing/overview
- github.com/n8n-io/n8n
More n8n advisories
All n8n| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Feb 25 | n8n Vulnerable to Stored XSS via Various Nodes High5.4Feb 25 | High5.4 | 1.123.22+2 more |
| Feb 25 | n8n has Arbitrary Command Execution via File Write and Git OperationsCritical8.5Feb 25 | Critical8.5 | 1.123.8+1 more |
| Feb 25 | n8n has Potential Remote Code Execution via Merge NodeCritical9.9Feb 25 | Critical9.9 | 1.123.22+2 more |
| Feb 25 | n8n has a Sandbox Escape in its JavaScript Task RunnerCriticalFeb 25 | Critical | 1.123.22+2 more |
| Feb 25 | n8n has Arbitrary File Read via Python Code Node Sandbox EscapeHigh9.9Feb 25 | High9.9 | 1.123.22+2 more |
| Feb 25 | n8n has Unauthenticated Expression Evaluation via Form NodeCritical9.0Feb 25 | Critical9.0 | 1.123.22+2 more |