CyberRota Analysis
AI-GeneratedThe JavaScript Code node in n8n workflow automation platform versions prior to 1.123.69, 2.33.4, and 2.34.1 is vulnerable to a sandbox escape due to the inability to freeze the Function.prototype, allowing authenticated users to manipulate the environment and access the host's global context. This vulnerability could lead to unauthorized access and execution of arbitrary code within the workflow. Organizations using affected versions should prioritize updating to the patched releases to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
n8n is a workflow automation platform. In versions prior to 1.123.69, 2.33.4, and 2.34.1, the JavaScript Code node's VM sandbox did not freeze the sandbox's Function.prototype, allowing an authenticated user with the ability to create and execute workflows to pollute it from within a Code node execution and recover a reference to the host's globalThis, resulting in a sandbox escape. The full exploit chain additionally depends on specific modules being available as allowlisted imports in the deployment's configuration. The issue is fixed in versions 1.123.69, 2.33.4, and 2.34.1.
Related CVEs
Other vulnerabilities affecting the same vendor(s)