CVE-2026-77083 n8n before 1.123.69 Code Node Sandbox Escape via Function.prototype Pollution

Medium 6.0 Published 20 Aug 2026 Updated 21 Aug 2026

Authenticated users can escape the Code node sandbox via prototype pollution to execute arbitrary code on the host, requiring specific module allowlists.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2026-77083?

CVE-2026-77083 is a medium-severity code injection vulnerability in N8n N8n, published on 20 Aug 2026. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

n8n is a workflow automation platform. In versions prior to 1.123.69, 2.33.4, and 2.34.1, the JavaScript Code node's VM sandbox did not freeze the sandbox's Function.prototype, allowing an authenticated user with the ability to create and execute workflows to pollute it from within a Code node execution and recover a reference to the host's globalThis, resulting in a sandbox escape. The full exploit chain additionally depends on specific modules being available as allowlisted imports in the deployment's configuration. The issue is fixed in versions 1.123.69, 2.33.4, and 2.34.1.

Weakness: CWE-1321

Which versions are affected by CVE-2026-77083?

It affects 1 product.

Products include N8n N8n.

How do I fix CVE-2026-77083?

Upgrade to a fixed version.

Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.

Is CVE-2026-77083 being exploited?

There is no known exploitation of CVE-2026-77083 in the wild and no public exploit code.

All N8n N8n vulnerabilities

Sources

Also known as GHSA-2664-hr5v-554w, GHSA-c9c6-rq46-h25v, MINI-w726-g996-58r9.