N8N · GHSA-gx3v-3x3v-f8r5 · AI agents & MCP
FIX → >= 1.123.89 +3
An authenticated user who can create or modify n8n workflows can escape the sandbox used for workflow expression evaluation. That lets them execute arbitrary code on the n8n server.
first public Oct 28, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Any self-hosted n8n instance where users can create or edit workflows is exposed, because the flaw is reached through workflow expressions. Instances where only fully trusted users can edit workflows carry less risk but still need the patch. Instances on n8n Cloud are patched by the vendor.
Not affected if managed-hosting, no-workflow-editors-untrusted
Who cares n8n, self-hosted, workflow-automation
n8n --version or in the n8n npm package in package.json; affected versions are below , , and depending on release line.An authenticated user with permission to create or modify workflows could escape the isolation applied to workflow expression evaluation and execute arbitrary code on the n8n host.
The issue has been fixed in n8n versions 1.123.89, 2.45.5, 2.46.1 and 3.0.1. Users should upgrade to one of these versions or later to remediate the vulnerability.
If upgrading is not immediately possible, administrators should consider the following temporary mitigations:
global:member access from any users who are not fully trusted until the instance is patched.NODES_EXCLUDE environment variable and instance hardening settings to limit the attack surface of the running instance.These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
1.123.892.45.52.46.13.0.1global:member or workflow-edit permissions.Upgrade to >= 1.123.89 +3
1.123.892.45.52.46.13.0.1