The Hacker News

n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process

The finding extends a series of expression-sandbox escapes n8n has patched since 2025. It follows CVE-2026-27577, a 9.4-rated ...