n8n: N8n versions before 2.36.2 contain an expression sandbox bypass vulnerability where free…
n8n
- Severity
- Critical, CVSS 9.9
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Record
- CVE-2026-85165
- Affects
- n8n
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- September 3, 2026
- Source last modified
- September 10, 2026
Description
n8n versions before 2.36.2 contain an expression sandbox bypass vulnerability where free identifiers in spread, computed-key, switch-case, or class-extension positions resolve against process globals. Authenticated users with workflow-edit permission can mutate host objects through expression evaluation, with changes persisting process-wide until restart.
Description quoted from the NVD record.
Who is affected
This flaw affects n8n, a tool that automates tasks by linking apps and services together in workflows. It affects n8n versions before 2.36.2. The problem is in the way n8n runs expressions, the small formulas people write inside workflows, which are meant to run in a protected space. A person who has a login and permission to edit workflows can break out of that protected space and change parts of the running n8n program. Those changes stay in effect for the whole program until it is restarted. This flaw is rated Critical.
What to do
- Find out who runs n8n for your organization: the person who installed it on your own computer or server, or an IT provider or vendor who manages it for you.
- If your organization runs n8n itself, the person who looks after it should update n8n to version
2.36.2or later. - Make sure n8n is restarted as part of the update, because changes made through this flaw stay in effect until the program restarts.
- If an IT provider or vendor runs n8n for you, send them this advisory and ask when the update to version
2.36.2or later will be done.
Analysis written from the source record as of September 10, 2026 and reviewed before publishing.