n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process

A high-severity vulnerability in n8n has been patched, which could have allowed authenticated workflow editors to execute operating system commands on the server. The issue was a sandbox escape that affected versions 2.32.0 and earlier than 2.32.1. The flaw was discovered by Security Joes while testing a previous fix for a different bypass issue. The vulnerability has been fixed in n8n versions 2.31.5 and later.