CVE-2026-77077

n8n versions before 1.123.69, 2.33.4, and 2.34.1 contain a JavaScript task runner VM sandbox escape.

N8N

n8n versions before 1.123.69, 2.33.4, and 2.34.1 contain a JavaScript task runner VM sandbox escape. The runner's prototype-freezing routine covers globalThis functions but not internal module constructors such as EventEmitter, allowing an authenticated user with Code node access to exploit prototype pollution to execute arbitrary commands within the runner container. Because the polluted prototype is a process-wide object, the corruption persists across other tenants' Code…

20. Aug 2026

Ausgewertete Quellen

• Hinweis
  https://www.vulncheck.com/advisories/n8n-before-remote-code-execution-via-eventemitter-prototype-pollution
• NVD
  CVE-2026-77077
• GitHub
  https://github.com/n8n-io/n8n/security/advisories/GHSA-m3hg-p5r9-fg9h