Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
n8n contains a sanitizer bypass vulnerability in the legacy expression evaluator's computed-member handler. An authenticated user with workflow create or modify permissions can craft a malicious expression to bypass the sanitizer and achieve host-level code execution as the n8n process. The legacy expression engine is the default in affected versions. Fixed in n8n 1.123.64, 2.29.8, and 2.30.1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-65591](https://github.com/n8n-io/n8n/security/advisories/GHSA-pm35-fqvh-cq5g) n8n conta... https://github.com/n8n-io/n8n/security/advisories/GHSA-pm35-fqvh-cq5g #Vulnerability #CVE #ZeroDay
Post summary
The tweet announces the existence of CVE-2026-65591 and links to the GitHub advisory, but provides no additional technical details, PoC, or exploitation evidence.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | n8n | n8n | - | node.js | - |
| App | n8n | n8n | - | node.js | - |
| App | n8n | n8n | 2.30.0 | node.js | - |
| App | n8n | n8n | 2.30.0 | node.js | - |