https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T21:34:38.478822+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-85169 CVE-2026-85169 — n8n before 1.123.73 Remote Code Execution via $fromAI Prototype Leak 2026-09-30T21:34:38.482037+00:00

Affected: n8n-io n8n

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the $fromAI handler. $fromAI resolved a caller-supplied placeholder name without requiring it to be an own property and admitted reserved keys; against a primitive input value it returned a live host-prototype reference. An attacker with workflow-build privilege can walk the prototype chain to the Function constructor and compile/execute arbitrary code in the main n8n process, leading to remote code execution.