n8n Expression Sandbox Escape Leads to Code Execution

What's on the official record

The OSV advisory GHSA-6xcw-7xm6-48c6 reports a HIGH-severity vulnerability in the npm package n8n, in the agent_framework layer. The advisory lists the alias CVE-2026-86083 and CWE-94, code injection. It states the issue is fixed in versions 1.123.76, 2.38.2, and 2.37.7, which means the affected versions are those below these fixed releases. The advisory is dated 10 September 2026.

Assessment

For a platform or AI-stack owner, the record names the package, the severity, and the three fixed releases, so the owner can check which n8n version is running and patch to 1.123.76, 2.38.2, or 2.37.7 as the advisory directs. The advisory attributes the flaw to expression code generation, which lets the owner decide whether to isolate or pull the affected version until the fix is applied.

For a deal team, the record gives a dated, versioned advisory for a package in the agent_framework layer, which the team can use to scope diligence on any target that runs n8n. The fixed releases let the team price or condition a transaction on whether the target is below those versions.

What would change this call

What to check next

Confidence

Filed 25 October 2026 from the record dated 10 September 2026.

Sources

[1] n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution — https://github.com/advisories/GHSA-6xcw-7xm6-48c6