EUVD-2026-66854

Applications that evaluate user-supplied Spring Expression Language SpEL expressions may be vulnerable to a Denial of Service DoS attack when the power operator ^ is used with a BigDecimal or BigInteger operand and a large exponent value. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 -...

CVE-2024-54152

⚙️🔨 진행 중 CVE-2024-54152 POC Angular Expressions는 Angular.JS 웹 프레임워크용 표현식을 독립형 모듈로 제공합니다. 버전 1.4.3 이전에는 공격자가 샌드박스를 탈출하는 악성 표현식을 작성하여 시스템에서 임의 코드를 실행할 수 있습니다. 더 복잡한비공개 페이로드를 사용하면 시스템에서 완전한 임의 코드 실행 권한을 얻을 수 있습니다. 이 문제는 Angular Expressions 버전 1.4.3에서 패치되었습니다. 두 가지 임시 해결 방법을 사용할 수 있습니다. proto에 대한 접근을...

CVE-2025-68613

CVE-2025-68613 n8n ist eine Open-Source-Plattform für Workflow-Automatisierung. Versionen ab 0.211.0 und vor 1.120.4, 1.121.1 und 1.122.0 enthalten eine kritische Schwachstelle für Remotecodeausführung RCE im System zur Auswertung von Workflow-Ausdrücken. Unter bestimmten Bedingungen können...

CVE-2026-1731

CVE-2026-1731 PoC de RCE Pré-Autenticação no BeyondTrust Remote Support !WARNING Este script destina-se exclusivamente a fins educacionais e de pesquisa. Não o utilize contra sistemas sem permissão explícita. Acesso ou testes não autorizados são ilegais e antiéticos. Leia o DISCLAIMER completo...

n8n-RCE-CVE-2025-68613

n8n CVE-2025-68613 개요 이 저장소는 교육 목적의 보안 연구 프로젝트 로, CVE-2025-68613 에 초점을 맞추고 있습니다. 이 취약점은 특정 버전의 n8n 에서 불안전한 워크플로 표현식 평가와 관련이 있습니다. 프로젝트는 통제된 로컬 랩 환경에서만 테스트되었습니다. CVE-2025-68613 정보 CVE-2025-68613은 인증된 원격 코드 실행RCE 취약점으로, 영향을 받는 n8n 버전에서 워크플로 표현식 평가가 안전하지 않게 처리되어 발생합니다. 특정 조건에서 인증된 사용자는 워크플로 표현식 평가...

GeoServer-CVE-2024-36401

GeoServer-CVE-2024-36401 GeoServer CVE-2024-36401: Vulnérabilité d'exécution de code à distance RCE dans l'évaluation des expressions de noms de propriétés GetPropertyValue root@kitploit: POST /geoserver/wfs HTTP/1.1 Host: PunitDarji Content-Type: application/xml User-Agent: Mozilla/5.0 Windows N...

n8n-CVE-2025-68613-exploit

n8n - CVE-2025-68613: Controllo Improprio delle Risorse di Codice Gestite Dinamicamente Vulnerabilità n8n contiene una vulnerabilità critica di Esecuzione di Codice Arbitrario nel suo sistema di valutazione delle espressioni dei flussi di lavoro. In determinate condizioni, le espressioni fornite ...

CVE-2025-68613

CVE-2025-68613 n8n هي منصة أتمتة سير عمل مفتوحة المصدر. تحتوي الإصدارات ابتداءً من 0.211.0 وما قبل 1.120.4 و1.121.1 و1.122.0 على ثغرة حرجة في تنفيذ التعليمات البرمجية عن بُعد RCE في نظام تقييم تعبيرات سير العمل الخاص بها. في ظل ظروف معينة، قد يتم تقييم التعبيرات المقدمة من المستخدمين المصادق عليه...

CVE-2026-41729

CVE-2026-41729: Spring Data REST JSON Patch Map Key SpEL Injection PoC Questo repository è una PoC minima di riproduzione per CVE-2026-41729, pubblicata tramite l'avviso di sicurezza ufficiale di Spring. Avviso ufficiale: https://spring.io/security/cve-2026-41729/ Titolo ufficiale: Spring Data RE...

CVE-2026-55585

QWED (open-source AI verification infrastructure) prior to version 5.1.2 is vulnerable to authenticated Remote Code Execution . Caller-controlled math expressions are passed directly to SymPy parse_expr() without restricted global_dict/local_dict namespaces, effectively allowing Python eval() to ...

n8n - Remote Code Execution via Expression Injection

n8n 1.120.4, 1.121.1, 1.122.0 contains a remote code execution caused by insufficient isolation in workflow expression evaluation, letting authenticated attackers execute arbitrary code with n8n process privileges. Exploit requires authentication. id: CVE-2025-68613 info: name: n8n - Remote Code...

CVE-2026-74785 Scriban before 7.0.0 Denial of Service via Unbounded Resource Consumption

Scriban before 7.0.0 contains three distinct denial-of-service vulnerabilities in expression evaluation that bypass existing safety controls through unbounded string multiplication, uncontrolled BigInteger shift operations, and LoopLimit bypass via range enumeration in builtin functions. Attacker...

VulnCheck KEV: CVE-2026-26190

Milvus is an open-source vector database built for generative AI applications. Prior to 2.5.27 and 2.6.10, Milvus exposes TCP port 9091 by default, which enables authentication bypasses. The /expr debug endpoint uses a weak, predictable default authentication token derived from etcd.rootPath...

CVE-2026-72765

n8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerability in expression evaluation. An authenticated user with permission to create or modify workflows can craft expressions using arrow-function bodies to bypass the expression sandbox, triggering system command execution on the...

EUVD-2026-56144

n8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerability in expression evaluation. An authenticated user with permission to create or modify workflows can craft expressions using arrow-function bodies to bypass the expression sandbox, triggering system command execution on the...

CVE-2026-72765

n8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerability in expression evaluation. An authenticated user with permission to create or modify workflows can craft expressions using arrow-function bodies to bypass the expression sandbox, triggering system command execution on the...

CVE-2026-72765 n8n before 2.32.1 Remote Code Execution via Expression Sandbox Escape

n8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerability in expression evaluation. An authenticated user with permission to create or modify workflows can craft expressions using arrow-function bodies to bypass the expression sandbox, triggering system command execution on the...

CVE-2026-72765

CVE-2026-72765 affects n8n prior to 2.31.5 and prior to 2.32.1. A sandbox-escape flaw in expression evaluation allows an authenticated user (with permission to create/modify workflows) to craft expressions using arrow-function bodies that bypass the expression sandbox and trigger system command e...

PT-2026-70167

n8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerability in expression evaluation. An authenticated user with permission to create or modify workflows can craft expressions using arrow-function bodies to bypass the expression sandbox, triggering system command execution on the...

CVE-2026-67199

Perspective 5.0.0 contains a denial of service vulnerability that allows remote attackers to block the server event loop indefinitely by submitting a crafted expression containing unbounded for or while loop constructs in a TableMakeViewReq message. Attackers can embed an arbitrarily large...