Critical n8n Flaws Allow Remote Code Execution and Exposure of Stored Credentials
Pillar Security researchers disclosed two now-patched n8n flaws: CVE-2026-27577, a sandbox escape in the expression compiler where a missing case in the AST rewriter lets process slip through untransformed and gives any authenticated expression full remote...