Forwarding Taiwan Computer Emergency Response Team / Coordination Center (TWCERT/CC) Security Alert TWCERTCC-200-202602-00000016
n8n is an open-source workflow automation tool that connects various applications via a visual drag-and-drop interface, allowing the automation of repetitive tasks without coding. Recently, n8n released a critical security advisory.
[CVE-2026-27495, CVSS: 9.4] This vulnerability allows an authenticated attacker with permissions to own or modify workflows to exploit a vulnerability in the JavaScript task execution sandbox, executing arbitrary code outside of its boundaries.
[CVE-2026-27493, CVSS: 9.5] This is a two-stage expression injection vulnerability. An unauthenticated attacker can inject and execute arbitrary n8n expressions via carefully crafted form data. If combined with the expression sandbox escape mechanism, it could lead to remote code execution on the n8n host.
[CVE-2026-27577, CVSS: 9.4] This vulnerability allows an authenticated attacker with permissions to create or modify workflows to use crafted workflow parameter expressions to trigger unauthorized system commands on the host executing n8n.
[CVE-2026-27498, CVSS: 9.0] This vulnerability allows an authenticated attacker with permissions to create or modify workflows to use git operations linked to the “Read/Write Files from Disk” node, leading to remote code execution.