CVE-2026-27493

creationtimestamp| type| source ---|---|--- 2026-02-26 01:23:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfpzvoee2m2e 2026-02-26 11:50:14+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-n8n-2 2026-03-11 13:51:00+00:00| seen|...

CVE-2026-27493 n8n has Unauthenticated Expression Evaluation via Form Node

n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, a second-order expression injection vulnerability existed in n8n's Form nodes that could allow an unauthenticated attacker to inject and evaluate arbitrary n8n expressions by submitting crafted form...

@regis-samurai/n8n (>=0.216.1 <=0.219.1), n8n-nodes-accelo (>=0.1.0 <=0.1.9) +11 more potentially affected by CVE-2026-27493 via n8n (>=0.138.0 <=0.93.0)

n8n NPM version =0.138.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2026-27493 Source advisory: OSV:GHSA-75G8-RV7V-32F7...