Lucene search
+L

1 matches found

OSV
OSV
added 2026/02/25 9:21 p.m.11 views

GHSA-75G8-RV7V-32F7 n8n has Unauthenticated Expression Evaluation via Form Node

Impact A second-order expression injection vulnerability existed in n8n's Form nodes that could allow an unauthenticated attacker to inject and evaluate arbitrary n8n expressions by submitting crafted form data. When chained with an expression sandbox escape, this could escalate to remote code...

9.5CVSS6.7AI score0.01074EPSS
SaveExploits0References8
Rows per page
Query Builder