60
CVE-2026-1470
Authenticated RCE via Workflow Expression Evaluation in n8n
- CVSS 3.1
- 9.9 critical
- EPSS
- 20%p98
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
n8n, an open-source workflow automation platform, contains a critical remote code execution flaw (CVSS 9.9, CWE-95 eval injection) in its workflow expression evaluation system. Expressions supplied by an authenticated user during workflow configuration are evaluated in an execution context that is not sufficiently isolated from the underlying runtime, allowing arbitrary code execution with the privileges of the n8n process. Successful exploitation can fully compromise the affected instance, including unauthorized access to sensitive data such as stored credentials, modification of workflows, and execution of system-level operations. Any self-hosted n8n deployment where a low-privileged or untrusted account can create or edit workflows is at risk, with the highest danger on internet-exposed instances. JFrog has published research including a public PoC and EPSS sits at 20.7% (97th percentile), but the flaw is not in CISA's KEV and no in-the-wild exploitation has been confirmed.
What to do: Upgrade self-hosted n8n instances to the latest patched release as soon as possible, confirming the fixed version against n8n's security advisory since exact version numbers were not specified here. Restrict workflow creation and editing to trusted users only, and enable n8n's task runner / expression sandboxing so expressions execute in an isolated process rather than the main runtime. Keep instances off the public internet behind a VPN or authenticated reverse proxy, and audit existing workflows for unfamiliar expressions as well as instance logs and stored credentials for signs of abuse.
| Product | Affected |
|---|---|
| n8n | — |
Estimated exposure
moderateLow thousands (≈2,000–10,000) of internet-exposed self-hosted n8n instances, plus a larger unquantified population on private networks and n8n Cloud — Public internet scan engines (Shodan/Censys) indexing n8n's default port 5678 typically show low-thousands of exposed self-hosted instances, while most deployments run on private networks, containers, or n8n's managed cloud.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
n8n contains a critical Remote Code Execution (RCE) vulnerability in its workflow Expression evaluation system. Expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently isolated from the underlying runtime. An authenticated attacker could abuse this behavior to execute arbitrary code with the privileges of the n8n process. Successful exploitation may lead to full compromise of the affected instance, including unauthorized access to sensitive data, modification of workflows, and execution of system-level operations.