n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process
Summary
n8n has patched a critical sandbox escape vulnerability that allowed authenticated workflow editors to execute operating-system commands as the n8n process. The flaw was discovered by Security Joes while investigating a bypass for a previous CVE. Affected versions range from prior to 2.31.5 and between 2.32.0 and 2.32.1.
IFF Assessment
This vulnerability allows for arbitrary OS command execution, which is a significant risk to the integrity and confidentiality of the n8n platform and the systems it interacts with.
Severity
The vulnerability is a sandbox escape allowing authenticated users to execute OS commands, indicating a high impact on confidentiality, integrity, and availability. The attack vector is local (authenticated user), but the potential for widespread compromise makes it critical.
Defender Context
This vulnerability highlights the importance of regularly patching automation platforms and carefully managing user privileges, especially for authenticated editors. Defenders should be vigilant for any signs of unauthorized command execution on systems running n8n.