N8n: Duplicate Advisory: Legacy Expression Evaluator Sanitizer Bypass Leads to Authenticated Code Execution
n8n contains a sanitizer bypass vulnerability in its legacy expression evaluator's computed-member handler. An authenticated user with workflow create or modify permissions can exploit this flaw to bypass the sanitizer and execute code at the host level with the privileges of the n8n process. The legacy expression engine is the default in affected versions. This vulnerability has been fixed in n8n versions 1.123.64, 2.29.8, and 2.30.1.
AI Analysis
Technical Summary
This vulnerability in n8n involves a sanitizer bypass in the legacy expression evaluator's computed-member handler. It allows an authenticated user with specific permissions to craft malicious expressions that bypass sanitization controls, leading to host-level code execution under the n8n process context. The issue affects versions using the legacy expression engine, which is the default. Official fixes are available in n8n versions 1.123.64, 2.29.8, and 2.30.1.
Potential Impact
Successful exploitation enables an authenticated user with workflow create or modify permissions to execute arbitrary code on the host running n8n. This can lead to full compromise of the n8n process and potentially the underlying system depending on the process privileges.
Mitigation Recommendations
A fix is available and users should upgrade to n8n version 1.123.64, 2.29.8, or 2.30.1 or later. Applying these updates will remediate the sanitizer bypass vulnerability in the legacy expression evaluator. Until patched, restrict workflow create or modify permissions to trusted users only.
N8n: Duplicate Advisory: Legacy Expression Evaluator Sanitizer Bypass Leads to Authenticated Code Execution
Description
n8n contains a sanitizer bypass vulnerability in its legacy expression evaluator's computed-member handler. An authenticated user with workflow create or modify permissions can exploit this flaw to bypass the sanitizer and execute code at the host level with the privileges of the n8n process. The legacy expression engine is the default in affected versions. This vulnerability has been fixed in n8n versions 1.123.64, 2.29.8, and 2.30.1.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in n8n involves a sanitizer bypass in the legacy expression evaluator's computed-member handler. It allows an authenticated user with specific permissions to craft malicious expressions that bypass sanitization controls, leading to host-level code execution under the n8n process context. The issue affects versions using the legacy expression engine, which is the default. Official fixes are available in n8n versions 1.123.64, 2.29.8, and 2.30.1.
Potential Impact
Successful exploitation enables an authenticated user with workflow create or modify permissions to execute arbitrary code on the host running n8n. This can lead to full compromise of the n8n process and potentially the underlying system depending on the process privileges.
Mitigation Recommendations
A fix is available and users should upgrade to n8n version 1.123.64, 2.29.8, or 2.30.1 or later. Applying these updates will remediate the sanitizer bypass vulnerability in the legacy expression evaluator. Until patched, restrict workflow create or modify permissions to trusted users only.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-m7jc-p4hf-xhwq
- Osv Schema Version
- 1.4.0
- Aliases
- []
- Ecosystems
- ["npm"]
- Database Specific Severity
- HIGH
- Cvss Version
- 4.0
Threat ID: 6a6150d09c2644c7f8da0524
Added to database: 07/22/2026, 23:22:56 UTC
Last enriched: 07/22/2026, 23:28:39 UTC
Last updated: 07/23/2026, 02:51:54 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.