n8n Vulnerability Allows Remote Attackers to Hijack Systems via Malicious Workflow Execution

n8n has released urgent security updates for CVE-2026-25049, a critical remote code execution vulnerability in its expression evaluation sandbox that permits authenticated, low-privilege users who can create or edit workflows to escape the application context and execute system commands. Affected versions (< 1.123.17 and < 2.5.2) were patched in 1.123.17 and 2.5.2; administrators are urged to upgrade immediately or apply mitigations such as restricting workflow editing permissions and hardening the runtime environment.