{"uuid": "f7c85fb1-6cd1-4cf1-a016-e57411aab266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-gv7g-jm28-cr3m", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrnefsqhi72u", "content": "n8n patched a sandbox escape (CVSS 8.7) that lets anyone who can edit a workflow run OS commands on the host.\n\nThat reaches the key that decrypts every credential n8n stores.\n\nUpdate to 2.32.1 or 2.31.5 now. (GHSA-gv7g-jm28-cr3m)", "creation_timestamp": "2026-07-27T16:55:41.014755Z"}