Lucene search
+L

23 matches found

OSV
OSV
added 2026/02/25 9:21 p.m.11 views

GHSA-75G8-RV7V-32F7 n8n has Unauthenticated Expression Evaluation via Form Node

Impact A second-order expression injection vulnerability existed in n8n's Form nodes that could allow an unauthenticated attacker to inject and evaluate arbitrary n8n expressions by submitting crafted form data. When chained with an expression sandbox escape, this could escalate to remote code...

9.5CVSS6.7AI score0.01271EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2026/02/25 9:21 p.m.23 views

n8n has Unauthenticated Expression Evaluation via Form Node

Impact A second-order expression injection vulnerability existed in n8n's Form nodes that could allow an unauthenticated attacker to inject and evaluate arbitrary n8n expressions by submitting crafted form data. When chained with an expression sandbox escape, this could escalate to remote code...

9.5CVSS6.6AI score0.01271EPSS
SaveExploits0References8Affected Software1
CNNVD
CNNVD
added 2026/02/25 12:0 a.m.21 views

n8n 安全漏洞

n8n is an open-source, scalable workflow automation tool developed by n8n. Versions of n8n prior to 2.10.1, 2.9.3, and 1.123.22 contained security vulnerabilities. These vulnerabilities stemmed from second-order expression injections in the Form node, which could allow unverified attackers to...

9.5CVSS7AI score0.01271EPSS
SaveExploits0References6
Rows per page
Query Builder