n8n $fromAI prototype pollution leading to host RCE (GHSA-9x83-43t8-5hwC)

Vulnerability Key Information Summary Vulnerability Overview Title: Expression Sandbox Escape via $fromAI Prototype Leak Leads to Host RCE Vulnerability ID: GhSA-9x83-43t8-5hwC Severity: High (CVSS v2 Base Score: 8.7 / 10) Description: does not treat the placeholder names supplied by the caller as its own properties, allowing reserved keys. For prototype value inputs, this vulnerability can trigger a reference to a low-privilege host process; the expression can escape to the constructor and execute code running within the main process, thereby gaining workflow construction privileges. Scope of Impact Affected Package: Affected Versions: = 1.123.73, >= 2.36.2, >= 2.35.4 Impact Metrics: - Exploitability: Attack Vector Network, Attack Complexity Low, Requirements None, Required Privileges Low, User Interaction None - Impact on the Vulnerable System: Confidentiality High, Integrity High, Availability High - Impact on Downstream Systems: Confidentiality None, Integrity None, Availability None Remediation Patch Versions: Users should upgrade to 1.123.73, 2.35.4, or 2.36.2 or later versions to mitigate the vulnerability. Temporary Mitigations (Workarounds): - If immediate upgrading is not possible, administrators may consider the following temporary measures: - Restrict access to the n8n instance to fully trusted users only. - Disable AI-related nodes and features, if present. - Ensure the n8n process runs under a dedicated low-privilege OS user account to limit the impact of command execution. - Note: These temporary measures do not fully eliminate the risk and serve only as short-term mitigations. POC / Exploit Code The page does not include POC code or an exploit code block.

Goal Reached Thanks to every supporter — we hit 100%!

n8n $fromAI prototype pollution leading to host RCE (GHSA-9x83-43t8-5hwC)

More from this source