Executive Summary

This vulnerability affects the open source workflow automation platform n8n. Before versions 1.123.17 and 2.5.2, an authenticated user who had permission to create or modify workflows could exploit crafted expressions within workflow parameters. By doing so, they could trigger unintended system command execution on the host machine running n8n.

This means that the user could execute commands on the server that were not intended by the system, potentially leading to unauthorized actions or control over the host.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability allows an authenticated user with workflow creation or modification permissions to execute arbitrary system commands on the host running n8n. This could lead to unauthorized access, data compromise, system disruption, or further exploitation of the host environment.

Because the attacker can run system commands, they might be able to escalate privileges, access sensitive information, modify or delete data, or disrupt services.

Useful 0 Not Useful 0

Compliance Impact

I don't know

Useful 0 Not Useful 0

Detection Guidance

I don't know

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, immediately upgrade n8n to version 1.123.17 or later, or version 2.5.2 or later, where the issue has been patched.

Ensure that only trusted authenticated users have permission to create or modify workflows, as the vulnerability requires such permissions to be exploited.

Useful 0 Not Useful 0