#CVE-2026-27577

Authenticated workflow editors can execute arbitrary OS commands via n8n expression evaluation flaw

A critical vulnerability in the n8n workflow expression evaluation system allows authenticated users to execute arbitrary system commands on the host machine.