CVE-2026-85169

Katalog CVE

CVSS 8.8 · High EPSS 0,88%

Kerentanan Improper Control of Generation of Code ('Code Injection') pada n8n. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the $fromAI handler. $fromAI resolved a caller-supplied placeholder name without requiring it to be an own property and admitted reserved keys; against a primitive input value it returned a live host-prototype reference. An attacker with workflow-build privilege can walk the prototype chain to the Function constructor and compile/execute arbitrary code in the main n8n process, leading to remote code execution.

Rincian

Terbit di NVD

3 September 2026

Terakhir diubah

18 September 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-94: Improper Control of Generation of Code ('Code Injection')

EPSS (30 hari)

0,88% peluang dieksploitasi; lebih tinggi dari 58,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/n8n-io/n8n/security/advisories/GHSA-9x83-43r8-5hwc mitigasi · advisory vendor
• https://www.vulncheck.com/advisories/n8n-before-1.123.73-remote-code-execution-via-fromai-prototype-leak advisory pihak ketiga