The vulnerability resides in the JavaScript Task Runner sandbox used by n8n. This is a CWE‑94 weakness, where malicious input can be executed outside the intended sandbox. An authenticated user who can create or modify workflows can trigger a sandbox escape that allows arbitrary code execution outside the constrained environment. Because this code runs on the host, the attacker could compromise the entire n8n instance or the underlying operating system, and if an external task runner is used, the impact may extend to other tasks running on that worker.

Affected vendors include n8n‑io, product n8n. Versions prior to 2.10.1, 2.9.3, and 1.123.22 are vulnerable. Upgrading to any of these patched releases or later versions resolves the issue.

With a CVSS score of 9.4, this flaw is considered critical. EPSS indicates a very low probability of exploitation at the time, but attackers with legitimate workflow privileges still pose a significant risk. The flaw is not in the CISA KEV catalog, yet the combination of high severity and the ability to fully escape the sandbox makes remediation a top priority.