n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process
Affected vendors and products
More on Workflow
Other advisories
- Not ratedCVE-2026-49272OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflow
- HighCVE-2026-49272OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflow
- Not ratedosv:CVE-2026-53942Conda Organization Infrastructure: Pwn Request in update workflow allows PR-controlled template rendering with SYNC_TOKEN
- Not ratedosv:CVE-2026-54532CloudPirates Open Source Helm Charts: pull_request_target workflow vulnerable to cache poisoning and OIDC token theft
- Not ratedosv:CVE-2026-115248subhajitkhan online-clinic-management-system Booking patappointtime.php behavioral workflow
- HighCVE-2026-113727OpenChoreo: Authorization bypass on WorkflowRun update allows cross-project takeover of workflow runs
- HighCVE-2026-113727OpenChoreo: Authorization bypass on WorkflowRun update allows cross-project takeover of workflow runs
- HighCVE-2026-91506Oracle Workflow: Sicherheitslücke
Other news entries
- The Huntress Tragic Quadrant: Ranking Threats Hitting Businesses HardestNewsBleepingComputer
- So Many AI Security Benchmarks, But None Tell the Whole StoryNewsDark Reading
- Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions LogsNewsThe Hacker News
- What Security Teams Can Do To Tame Wild CodeNewsThe Hacker News
- GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub RepositoriesNewsThe Hacker News
- Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit AttemptsNewsThe Hacker News
- Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of RepositoriesNewsThe Hacker News
- The Sixth Voice of the CISO Data Shows Cyber Risk Has Moved Inside the WorkflowNewsThe Hacker News
Source: https://thehackernews.com/2026/07/n8n-sandbox-escape-lets-workflow.html
ID