An authenticated expression injection vulnerability in n8n allows for unauthorized code execution, presenting a critical risk to the security of the application and integrated data.

This is a code injection vulnerability (CWE-94) involving improper control of code generation within the expression engine. The vulnerability requires authentication to access the resource locator, where an attacker can supply malicious input that results in unintended code execution.

Successful exploitation leads to unauthorized code execution, which can result in full system compromise, data exfiltration, or lateral movement within the environment. The CVSS score of 8.4 reflects the high severity of this vulnerability, emphasizing the risk to core infrastructure and business operations.

Immediate Action: Update n8n to version 1.123.69, 2.33.4, or 2.34.1 to patch the expression injection flaw.

Proactive Monitoring: Monitor workflow execution logs for unexpected or unauthorized expression patterns that deviate from standard operational behavior.

Compensating Controls: Utilize role-based access control to limit who can modify workflows or access resource locators, thereby reducing the attack surface.

Public Exploit Available: Unknown

Immediate patching is required to address this vulnerability. Because code injection allows an attacker to bypass standard application logic and execute arbitrary commands, organizations should treat this update with the highest urgency to prevent potential system-wide compromise.