Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
n8n-io/n8n
master @ d3f1164
342
Fixes
50
CVEs
CRITICAL
Peak severity
18.2%
Coverage
Highlights
Auth Bypass: 110 prior fixes. Scrutinize any change in this area.
packages/core/src/execution-engine/node-execution-context/utils/file-system-helper-functions.ts: most-fixed (8 issues). Treat as high-risk during review.
178 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Sandbox Escape: Expression evaluation sandboxing has been repeatedly bypassed via prototype and constructor lookups, computed destructuring, and scope reference escapes. Attackers with workflow modification rights can exploit these to achieve remote code execution on the host.
Sandbox Escape: The native Python task runner sandbox is highly susceptible to escapes via name-mangled attributes, dynamic imports, and standard built-ins such as __builtins__, locals(), and globals(), leading to complete guest escape and system access.
Auth Bypass: Complex RBAC models and project-level scopes have had multiple validation gaps where subworkflows could execute with parent contexts, or workflow operations bypassed project checks, allowing cross-project access to workflows and credentials.