CVE-2026-72765 n8n-io CVE debrief

Who should care

Users of n8n versions before 2.31.5 and 2.32.1, especially those with workflow creation or modification permissions, should be aware of this vulnerability and take steps to patch their instances. Additionally, administrators and security teams responsible for monitoring and securing workflow systems should be informed about this issue to ensure proper mitigation and protection measures are in place.

Technical summary

The CVE-2026-72765 vulnerability affects n8n versions before 2.31.5 and 2.32.1. It allows an authenticated user with workflow creation or modification permissions to craft expressions using arrow-function bodies, bypassing the expression sandbox and triggering system command execution on the host. The CVSS score for this vulnerability is 8.7, indicating a high severity. The issue is fixed in versions 2.31.5 and 2.32.1.

Defensive priority

Authenticated users with workflow creation or modification permissions should prioritize patching n8n instances to version 2.31.5 or 2.32.1.

Recommended defensive actions

• Patch n8n instances to version 2.31.5 or 2.32.1
• Restrict workflow creation and modification permissions to trusted users
• Monitor n8n instance logs for suspicious activity
• Consider implementing additional security controls for workflow execution
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE-2026-72765 issue involves a sandbox escape vulnerability in expression evaluation within n8n versions before 2.31.5 and 2.32.1. An authenticated user with permission to create or modify workflows can exploit this by crafting expressions using arrow-function bodies, leading to system command execution on the host. The issue is addressed in versions 2.31.5 and 2.32.1. Evidence is based on official CVE and NVD records, as well as advisories from the vendor and Vulncheck.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.