Threats tagged 'ghsa-48fh-2c4x-8wcm'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.7	CVE-2026-119408n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execution vulnerability via High8.72026-10-30GCVE DatabaseCVE-2026-119408 A remote code execution vulnerability exists in n8n versions before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1. This flaw involves deprecated Function, Function Item, and LangChain Code nodes that run outside the task runner isolation, allowing authenticated users with workflow creation or modification privileges to execute arbitrary JavaScript code in the main n8n process. Report on CVE-2026-119408 Vulnerability CWE-653 #ghsa-48fh-2c4x-8wcm	GCVE Database	2026-10-30

Page 1 of 1