Critical · published February 4, 2026
🚨 A crafty user can execute system commands just by manipulating workflow parameters in n8n! 🔥 Imagine a chef who has the power to change the menu just by scribbling notes in the ingredient list — this could lead to some unexpected and dangerous dishes! This vulnerability allows an authenticated user to trigger unintended system command execution, giving them the power to run arbitrary commands on the host machine. That's like letting a rogue chef into the kitchen and letting them whip up anything they want — potentially devastating if not addressed!
Imagine a chef who has the power to change the menu just by scribbling notes in the ingredient list — this could lead to some unexpected and dangerous dishes! Prior to versions 1.123.17 and 2.5.2, n8n permitted an authenticated user to exploit crafted expressions in workflow parameters, leading to unauthorized command execution on the host system.
This vulnerability allows an authenticated user to trigger unintended system command execution, giving them the power to run arbitrary commands on the host machine. That's like letting a rogue chef into the kitchen and letting them whip up anything they want — potentially devastating if not addressed! Immediately update n8n to versions 1.123.17 or 2.5.2 to close this security hole. Additionally, review user permissions to ensure that only trusted users can create or modify workflows. It's crucial to implement ongoing security audits as part of your workflow processes! You've got this! Follow these steps, and you'll have a fortified n8n environment in no time. 🛡️