Vulnerability · Published Aug 20, 2026 · Assigned by VulnCheck

CVE-2026-77083n8n before 1.123.69 Code Node Sandbox Escape via Function.prototype Pollution

Medium 6.0

In plain English

A medium-severity prototype pollution in n8n from n8n-io. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).

Severity (CVSS 4.0)6.0Medium

Exploit odds (30 days)0.4%top 69.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

n8n is a workflow automation platform. In versions prior to 1.123.69, 2.33.4, and 2.34.1, the JavaScript Code node's VM sandbox did not freeze the sandbox's Function.prototype, allowing an authenticated user with the ability to create and execute workflows to pollute it from within a Code node execution and recover a reference to the host's globalThis, resulting in a sandbox escape. The full exploit chain additionally depends on specific modules being available as allowlisted imports in the deployment's configuration. The issue is fixed in versions 1.123.69, 2.33.4, and 2.34.1.

Affected products (as reported)

Vendor	Product	Versions
n8n-io	n8n	0 – before 1.123.69
n8n-io	n8n	2.34.0 – before 2.34.1
n8n-io	n8n	2.0.0 – before 2.33.4

Weakness: CWE-1321 · Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

References

GitHub Security Advisory (GHSA-c9c6-rq46-h25v) vendor-advisory
VulnCheck Advisory: n8n before 1.123.69 Code Node Sandbox Escape via Function.prototype Pollution third-party-advisory