Rilevate vulnerabilità in n8n
Risolte due vulnerabilità con gravità "alta" in n8n, piattaforma open source per l'automazione dei flussi di lavoro.
EPSS 0.01 CVE-2026-119408 CVE-2026-119557 n8n IT
Výsledky hledání
· zachyceno
Vulnerability in n8n
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 8.7, CVEs: CVE-2026-119408, Summary: CVE-2026-119408 (CVSS: 8.7): The Function and Function Item nodes run user code in the vm2 sandbox, and the LangChain Code node runs user code in the n8n main process. An authenticated user with permission to create or modify workflows could use these nodes to execute arbitrary code in the n8n main process, outside the task runner isolation that applies to the Code node.
EPSS 0.01 CVSS 8.7 CVE-2026-119408 n8n FI