Two vulnerabilities in n8n’s sandbox mechanism could be exploited for remote code execution (RCE) on the host system.
Friendly Navigation with Click Dropdown ☰ BACK TO BE.COM ABOUT THE HACKATHON ▼ WHO IS INVITED? WHAT & HOW JUDGING CRITERIA ...
A critical vm2 Node.js vulnerability (CVE-2026-22709, CVSS 9.8) allows sandbox escape via Promise handler bypass.
Researchers disclosed two n8n vulnerabilities that let authenticated users bypass JavaScript and Python sandboxes to run ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results