CVE-2026-27493

n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, a second-order expression injection vulnerability existed in n8n's Form nodes that could allow an unauthenticated attacker to inject and evaluate arbitrary n8n expressions by submitting crafted form data. When chained with an expression sandbox escape, this could escalate to remote code execution on the n8n host. The vulnerability requires a specific workflow configuration to be exploitable. First, a form node with a field interpolating a value provided by an unauthenticated user, e.g. a form submitted value. Second, the field value must begin with an `=` character, which caused n8n to treat it as an expression and triggered a double-evaluation of the field content. There is no practical reason for a workflow designer to prefix a field with `=` intentionally — the character is not rendered in the output, so the result would not match the designer's expectations. If added accidentally, it would be noticeable and very unlikely to persist. An unauthenticated attacker would need to either know about this specific circumstance on a target instance or discover a matching form by chance. Even when the preconditions are met, the expression injection alone is limited to data accessible within the n8n expression context. Escalation to remote code execution requires chaining with a separate sandbox escape vulnerability. The issue has been fixed in n8n versions 2.10.1, 2.9.3, and 1.123.22. Users should upgrade to one of these versions or later to remediate the vulnerability. If upgrading is not immediately possible, administrators should consider the following temporary mitigations. Review usage of form nodes manually for above mentioned preconditions, disable the Form node by adding `n8n-nodes-base.form` to the `NODES_EXCLUDE` environment variable, and/or disable the Form Trigger node by adding `n8n-nodes-base.formTrigger` to the `NODES_EXCLUDE` environment variable. These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.

• CWE-94
• CWE-95

• https://github.com/n8n-io/n8n/commit/562d867483e871b0f1e31776252e23bd721df75bPatch
• https://github.com/n8n-io/n8n/issues/19Issue Tracking
• https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.22Product
• https://github.com/n8n-io/n8n/releases/tag/n8n@2.10.1Product
• https://github.com/n8n-io/n8n/releases/tag/n8n@2.9.3Product
• https://github.com/n8n-io/n8n/security/advisories/GHSA-75g8-rv7v-32f7Mitigation, Vendor Advisory

Published

Feb 25, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-27487OpenClaw is a personal AI assistant. In versions 2026.2.13 a…8
• CVE-2026-27488OpenClaw is a personal AI assistant. In versions 2026.2.17 a…7.3
• CVE-2026-27489Open Neural Network Exchange (ONNX) is an open standard for …7.5
• CVE-2026-2749Vulnerability in Centreon Centreon Open Tickets on Central S…8.8
• CVE-2026-27491Discourse is an open-source discussion platform. Prior to ve…4.3
• CVE-2026-27492Lettermint Node.js SDK is the official Node.js SDK for Lette…4.7
• CVE-2026-27494n8n is an open source workflow automation platform. Prior to…9.9
• CVE-2026-27495n8n is an open source workflow automation platform. Prior to…9.9
• CVE-2026-27496n8n is an open source workflow automation platform. Prior to…6.5
• CVE-2026-27497n8n is an open source workflow automation platform. Prior to…8.8
• CVE-2026-27498n8n is an open source workflow automation platform. Prior to…8.8
• CVE-2026-2750Improper Input Validation vulnerability in Centreon Centreon…9.8