infoSource: The Hacker News
n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process
n8n has patched a high-severity expression-sandbox escape that could let an authenticated workflow editor execute operating-system commands on the server running the automation platform. Security Joes found the flaw while probing n8n's February fix for CVE-2026-27577 for another bypass. The affected ranges are <2.31.5 and >=2.32.0,<2.32.1. n8n fixed the flaw in versions 2.31.5 and
Read at the sourceSummary written for cymesh.dev. The full article lives at The Hacker News.
Referenced CVEs
Topics
This is what cymesh.net is for
Certificate and hostname problems are the ones you find out about from your users. cymesh.net finds them first.
monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks