n8n expression sandbox escape allows authenticated RCE
n8n sandbox escape: authenticated workflow editors could execute OS commands on the server via crafted expressions. CVSS 9.9 critical. Fixed in 2.10.1, 2.9.3, 1.123.22.
- Vendor
- n8n GmbH
- Product
- n8n
- CVSS
- 9.9
- EPSS (exploit probability)
- 10.7%
- Status
- patched
- Published
Is CVE-2026-27577 being exploited?
Not on any exploited-vulnerability catalog we track. CVE-2026-27577 was not on the CISA, ENISA or CIRCL exploited catalogs as of our 2026-11-13 snapshot. That can change quickly; check the write-up below for the latest reporting.
FIRST's EPSS model puts the probability of exploitation activity in the next 30 days at 10.7% (scored October 25, 2026).
- CISA KEV[ — ]
- ENISA EUVD (exploited)[ — ]
- CIRCL KEV[ — ]
Catalog snapshot 2026-11-13. Full cross-catalog view: /kev-comparison
CVE-2026-27577 timeline
Every event links to its source. Catalog dates are each catalog's own; day offsets count from NVD publication. Data: JSON
An authenticated user with permission to create or modify workflows in n8n could abuse crafted expressions in workflow parameters to trigger unintended OS command execution on the host running the n8n process. The class: expression evaluation in workflow automation platforms, where user-supplied expressions reach an execution context that should be sandboxed but isn’t.
This is a follow-on to CVE-2025-68613, which identified earlier exploits in the same expression-evaluation path. CVE-2026-27577 covers additional sandbox escapes patched after that first round. Source: NVD.
Affected versions
n8n prior to versions 2.10.1, 2.9.3, and 1.123.22 across all maintained release tracks.
What to do
Upgrade to n8n 2.10.1, 2.9.3, or 1.123.22 — whichever matches your release track. n8n maintains multiple concurrent tracks; the fix lands across all three.
If immediate upgrade is not possible: limit workflow creation and editing permissions to fully trusted users only, and deploy n8n in a hardened environment with restricted OS privileges and network access. These are short-term measures only — they reduce the blast radius, they do not close the path.
Note that a bypass of the CVE-2026-27577 patch was later identified by Security Joes and fixed in n8n 2.31.5 and 2.32.1. If you’re on an older track, the correct remediation is upgrading to the patched versions above, not the bypass fix; check the coverage for the full timeline.
