n8n contains a critical Remote Code Execution (RCE) vulnerability in its workflow Expression evaluation system. Expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently isolated from the underlying runtime.
An authenticated attacker could abuse this behavior to execute arbitrary code with the privileges of the n8n process. Successful exploitation may lead to full compromise of the affected instance, including unauthorized access to sensitive data, modification of workflows, and execution of system-level operations.
References
| Link | Resource |
|---|---|
| https://github.com/n8n-io/n8n/commit/aa4d1e5825829182afa0ad5b81f602638f55fa04 | Patch |
| https://research.jfrog.com/vulnerabilities/n8n-expression-node-rce/ | Exploit Patch Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
20 Feb 2026, 13:44
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
N8n n8n
N8n |
|
| CPE | cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:* cpe:2.3:a:n8n:n8n:2.5.0:*:*:*:*:node.js:*:* |
|
| References | () https://github.com/n8n-io/n8n/commit/aa4d1e5825829182afa0ad5b81f602638f55fa04 - Patch | |
| References | () https://research.jfrog.com/vulnerabilities/n8n-expression-node-rce/ - Exploit, Patch, Third Party Advisory |
27 Jan 2026, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-27 15:15
Updated : 2026-02-20 13:44
NVD link : CVE-2026-1470
Mitre link : CVE-2026-1470
CVE.ORG link : CVE-2026-1470
JSON object : View
Products Affected
n8n
- n8n
CWE
CWE-95
Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')