{"schema":"threatline.record/2","record":{"id":"GHSA-gx3v-3x3v-f8r5","aliases":["GHSA-gx3v-3x3v-f8r5"],"summary":"Insufficient Isolation in Workflow Expression Evaluation","details":"## Impact\r\n\r\nAn authenticated user with permission to create or modify workflows could escape the isolation applied to workflow expression evaluation and execute arbitrary code on the n8n host. \r\n\r\n## Patches\r\n\r\nThe issue has been fixed in n8n versions 1.123.89, 2.45.5, 2.46.1 and 3.0.1. Users should upgrade to one of these versions or later to remediate the vulnerability.\r\n\r\n## Workarounds\r\n\r\nIf upgrading is not immediately possible, administrators should consider the following temporary mitigations:\r\n- Restrict n8n instance access to fully trusted users only.\r\n- Remove `global:member` access from any users who are not fully trusted until the instance is patched.\r\n- Audit active workflows for expressions that reference unexpected JavaScript properties.\r\n- Use the `NODES_EXCLUDE` environment variable and instance hardening settings to limit the attack surface of the running instance.\r\n\r\nThese workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.","categories":["Frameworks"],"product":"n8n","vendor":"","ecosystem":null,"affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-gx3v-3x3v-f8r5","source_modified_at":"2026-10-28T10:19:22Z","fetched_at":"2026-10-28T15:55:58.673066Z","package":{"ecosystem":"npm","name":"n8n"},"range":"< 1.123.89"},{"source":"GitHub Advisory Database","source_url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-gx3v-3x3v-f8r5","source_modified_at":"2026-10-28T10:19:22Z","fetched_at":"2026-10-28T15:55:58.673066Z","package":{"ecosystem":"npm","name":"n8n"},"range":"< 2.46.1"},{"source":"GitHub Advisory Database","source_url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-gx3v-3x3v-f8r5","source_modified_at":"2026-10-28T10:19:22Z","fetched_at":"2026-10-28T15:55:58.673066Z","package":{"ecosystem":"npm","name":"n8n"},"range":"< 2.45.5"},{"source":"GitHub Advisory Database","source_url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-gx3v-3x3v-f8r5","source_modified_at":"2026-10-28T10:19:22Z","fetched_at":"2026-10-28T15:55:58.673066Z","package":{"ecosystem":"npm","name":"n8n"},"range":"< 3.0.1"}],"fixed_versions":[],"cvss":7.7,"severity":"High","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-28T08:47:50Z","modified_at":"2026-10-28T10:19:22Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-gx3v-3x3v-f8r5","fetched_at":"2026-10-28T15:55:58.673066Z","source_modified_at":"2026-10-28T10:19:22Z"}],"sources":["GitHub Advisory Database"],"references":[],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-28T10:19:22Z","content_hash":"137bf89b75a249c7af5a5caaa1cc524a43c7ce19172b7933e3329489d02e3a4a"}}