Vulnerability in n8n

Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 8.7, CVEs: CVE-2026-119408, Summary: CVE-2026-119408 (CVSS: 8.7): The Function and Function Item nodes run user code in the vm2 sandbox, and the LangChain Code node runs user code in the n8n main process. An authenticated user with permission to create or modify workflows could use these nodes to execute arbitrary code in the n8n main process, outside the task runner isolation that applies to the Code node.

Číst originál na NCSC-FI →

CZ · EN/orig

n8n FI

tg: zranitelnost

CVE v události 1

CVE	hodnocení	KEV	EPSS
CVE-2026-119408	8.8 3.1 · VulnCheck 8.7 4.0 · VulnCheck	–	0.01

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 8.7.