n8n ships 16 advisories in one day, including two expression-sandbox escapes that reach code execution

GitHub Security Advisories·high signalXBlueskyLinkedInCopy link

GitHub's advisory database carries 16 n8n advisories published 2026-09-10, two of them high-severity sandbox escapes: CVE-2026-86083 lets an expression replace the global JSON.stringify so the legacy expression engine's own code generator emits attacker source, and CVE-2026-86076 rebinds a class-field sanitizer to reach the Function constructor. Both are fixed in 1.123.76, 2.37.7 and 2.38.2, with N8N_EXPRESSION_ENGINE=vm as the stopgap. The same batch includes an anonymous approval-gate bypass via a reused resumeToken over the chat WebSocket, per-resource OAuth consent bypass, cross-tenant project-member PII disclosure, and disabled OIDC SSO endpoints that still issue valid sessions.