GHSA-gx3v-3x3v-f8r5
n8n: Insufficient Isolation in Workflow Expression Evaluation
n8nFrameworks
CVSS
7.7HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version yet
What fixes it
No source in this snapshot names a fixed version.
Description
Impact
An authenticated user with permission to create or modify workflows could escape the isolation applied to workflow expression evaluation and execute arbitrary code on the n8n host.
Patches
The issue has been fixed in n8n versions 1.123.89, 2.45.5, 2.46.1 and 3.0.1. Users should upgrade to one of these versions or later to remediate the vulnerability.
Workarounds
If upgrading is not immediately possible, administrators should consider the following temporary mitigations:
- Restrict n8n instance access to fully trusted users only.
- Remove
global:memberaccess from any users who are not fully trusted until the instance is patched. - Audit active workflows for expressions that reference unexpected JavaScript properties.
- Use the
NODES_EXCLUDEenvironment variable and instance hardening settings to limit the attack surface of the running instance.
These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.
Text from GitHub Advisory Database
Affected versions 4
- n8n, npm< 1.123.89GitHub
- n8n, npm< 2.46.1GitHub
- n8n, npm< 2.45.5GitHub
- n8n, npm< 3.0.1GitHub