CVE-2026-1470 & CVE-2026-0863: Severe Sandbox Escape Vulnerabilities Expose n8n ...

Socradar • January 29, 2026

Share: View original

CVE -2026-1470 (CVSS 9.9) is critical and affects JavaScript execution inside the expression engine. The second, CVE -2026-0863 (CVSS 8.5) is...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical vm2 Vulnerability in Node.js Allows Code Execution A critical vulnerability in the vm2 sandboxing library for Node.js has been identified, enabling attackers to escape the sandbox and execute arbitrary code on affected systems. This flaw poses a significant risk to applications utilizing the vm2 library, which is widely used for running untrusted code securely. 13 sources 45

Extracted Entities

CVEs (2)

CVE-2026-0863 CVE-2026-1470

Platforms (1)