{"uuid": "6e33ee83-0053-44c3-928d-a39a509746b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2322", "content": "\ud83d\udd34 n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process\n\nn8n has patched a high-severity expression-sandbox escape that could let an authenticated workflow editor execute operating-system commands on the server running the automation platform. Security Joes found the flaw while probing n8n's February fix for CVE-2026-27577 for another bypass.\n\nThe affected ranges are <2.31.5 and >=2.32.0,<2.32.1. n8n fixed the flaw in versions 2.31.5 and 2.32.1. It tracks the issue as GHSA-gv7g-jm28-cr3m, rates it High with a CVSS 4.0 score of 8.7, and no CVE had been assigned as of July 27, 2026.", "creation_timestamp": "2026-08-21T23:00:07.925313Z"}