Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 15 Nov 2026 07:10:21 +0000 CVE-2026-126391 — n8n before 1.123.89 RCE via Workflow Expression Evaluation Sandbox Escape https://db.gcve.eu/vuln/cve-2026-126391 <p><strong>Affected:</strong> n8n-io n8n</p> <p>n8n before 1.123.89 contains an insufficient isolation vulnerability in workflow expression evaluation that allows authenticated users to escape the sandbox. Attackers with permission to create or modify workflows can craft expressions referencing unexpected JavaScript properties to execute arbitrary code on the n8n host.</p> <p><strong>Affected:</strong> n8n-io n8n</p> <p>n8n before 1.123.89 contains an insufficient isolation vulnerability in workflow expression evaluation that allows authenticated users to escape the sandbox. Attackers with permission to create or modify workflows can craft expressions referencing unexpected JavaScript properties to execute arbitrary code on the n8n host.</p> https://db.gcve.eu/vuln/cve-2026-126391