---
id: "CVE-2026-126391"
page: "https://infrastack.ai/live/CVE-2026-126391"
kind: "vulnerability"
aliases: ["CVE-2026-126391"]
title: "n8n: workflow expressions escape sandbox and run code on host"
severity: "high"
cvss: 7.7
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-tooling", "n8n", "self-hosted", "workflow-automation"]
not_affected_if: ["managed-hosting", "workflow-editing-restricted"]
published_at: "2026-11-13T10:17:42+00:00"
first_seen_at: "2026-11-13T10:47:18+00:00"
updated_at: "2026-11-13T10:52:28+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-126391", "first_seen_at": "2026-11-13T10:47:18+00:00"}]
exploit_sources: []
---

# n8n: workflow expressions escape sandbox and run code on host

Link for people: https://infrastack.ai/live/CVE-2026-126391 (this .md is for agents)

n8n before 1.123.89 lets authenticated users escape the workflow expression sandbox through crafted JavaScript property references. An attacker who can create or modify workflows can execute arbitrary code on the n8n host.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the running n8n version with `n8n --version` or the n8n instance settings page.
- Confirm whether untrusted users can create or edit workflows on the instance.

## Fix

- n8n: `1.123.89`

## Timeline

- 2026-11-13T10:47:18+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-126391

## Documents

- [advisory] Maintainer's advisory: github.com https://github.com/n8n-io/n8n/security/advisories/GHSA-gx3v-3x3v-f8r5
- [advisory] Third-party advisory: www.vulncheck.com https://www.vulncheck.com/advisories/n8n-before-1.123.89-rce-via-workflow-expression-evaluation-sandbox-escape

## From the sources

n8n before 1.123.89 contains an insufficient isolation vulnerability in workflow expression evaluation that allows authenticated users to escape the sandbox. Attackers with permission to create or modify workflows can craft expressions referencing unexpected JavaScript properties to execute arbitrary code on the n8n host.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_