CVE-2026-77083
Received Received - Intake

Prototype Pollution in n8n Workflow Automation Platform

Publication date: 2026-08-20

Last updated on: 2026-08-20

Assigner: VulnCheck

Description
n8n is a workflow automation platform. In versions prior to 1.123.69, 2.33.4, and 2.34.1, the JavaScript Code node's VM sandbox did not freeze the sandbox's Function.prototype, allowing an authenticated user with the ability to create and execute workflows to pollute it from within a Code node execution and recover a reference to the host's globalThis, resulting in a sandbox escape. The full exploit chain additionally depends on specific modules being available as allowlisted imports in the deployment's configuration. The issue is fixed in versions 1.123.69, 2.33.4, and 2.34.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-20
Last Modified
2026-08-20
Generated
2026-08-20
AI Q&A
2026-08-20
EPSS Evaluated
N/A
NVD
CVE-2026-77083
EUVD
EUVD-2026-63271

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
n8n n8n to 1.123.69 (exc)
n8n n8n to 2.33.4 (exc)
n8n n8n to 2.34.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1321 The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a sandbox escape in n8n, a workflow automation platform. It affects versions before 1.123.69, 2.33.4, and 2.34.1. The issue occurs in the JavaScript Code node's VM sandbox where Function.prototype was not frozen. An authenticated user with workflow creation rights could pollute this prototype, recover a reference to the host's globalThis, and escape the sandbox. Exploitation requires specific allowlisted modules in the deployment configuration.

Detection Guidance

Detecting this vulnerability requires checking the version of n8n installed on your system. Run the following command to check the version: n8n --version. If the output shows a version prior to 1.123.69, 2.33.4, or 2.34.1, your system is vulnerable.

Impact Analysis

An attacker could gain unauthorized access to the host system running n8n. This could lead to data breaches, unauthorized code execution, or compromise of sensitive information processed by workflows. The impact is high for confidentiality but low for integrity and availability. Attackers need network access and specific module configurations to exploit this.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating GDPR's data protection requirements and HIPAA's security rules for protected health information. Organizations using affected n8n versions may face compliance violations, legal penalties, and reputational damage due to potential exposure of sensitive data.

Mitigation Strategies

Immediately upgrade n8n to version 1.123.69, 2.33.4, or 2.34.1 or later. As temporary measures, restrict instance access to trusted users, minimize allowlisted modules, and run the task runner process under a low-privilege user account.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-77083. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart