VULNERABILITY INTELLIGENCE

CVE-2026-85169

CVSS score8.8 HIGH
EPSS probability0.88%
CISA KEVNot currently listed
Published2026-09-03
Last modified2026-10-29
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the $fromAI handler. $fromAI resolved a caller-supplied placeholder name without requiring it to be an own property and admitted reserved keys; against a primitive input value it returned a live host-prototype reference. An attacker with workflow-build privilege can walk the prototype chain to the Function constructor and compile/execute arbitrary code in the main n8n process, leading to remote code execution.

Weakness classification

  • disclosure@vulncheck.com: CWE-94

Primary references