Free AI Safety Workshop — in collaboration with explainx.aiSave your seat
AgentbeamBeta
AI agent vulnerability · n8n

CVE-2026-1470: n8n Unsafe Workflow Expression Evaluation Allows Remote Code Execution

criticalCVSS 3.1 9.9GHSA-5xrp-6693-jjx9

n8n contains a critical Remote Code Execution (RCE) vulnerability in its workflow Expression evaluation system. Expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently isolated from the underlying runtime. An authenticated attacker could abuse this behavior to execute arbitrary code with the privileges of the n8n process.

Published Jan 27, 2026 · Updated Jan 29, 2026

Affected packages

n8n

Ecosystem
npm
Affected
< 1.123.17
Fixed in
1.123.17
Check
npm ls n8n

n8n

Ecosystem
npm
Affected
>= 2.0.0, < 2.4.5
Fixed in
2.4.5
Check
npm ls n8n

n8n

Ecosystem
npm
Affected
>= 2.5.0, < 2.5.1
Fixed in
2.5.1
Check
npm ls n8n

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

n8n contains a critical Remote Code Execution (RCE) vulnerability in its workflow Expression evaluation system. Expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently isolated from the underlying runtime.

An authenticated attacker could abuse this behavior to execute arbitrary code with the privileges of the n8n process. Successful exploitation may lead to full compromise of the affected instance, including unauthorized access to sensitive data, modification of workflows, and execution of system-level operations.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More n8n vulnerabilities

All n8n entries