#n8n
-
From Schema Name to RCE: Dissecting CVE-2026-33696 in n8n
Researcher Simon Köck describes how the innocuous “Custom Fields” option in the GSuiteAdmin node of the n8n automation platform turns into remote code execution through prototype pollution.
-
n8n Sandbox Escape: Workflow Editor Could Run OS Commands
The n8n automation platform has patched a high-severity vulnerability: an authenticated workflow editor could break out of the expression sandbox and run operating-system commands with the privileges of the n8n process.