CVE-2026-27577

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

July 28, 2026

Last Seen

July 30, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

n8n Sandbox Escape Vulnerability Allows OS Command Execution70.5

On July 22, 2026, n8n released a patch for a high-severity sandbox escape vulnerability (GHSA-gv7g-jm28-cr3m) rated 8.7 on CVSS 4.0. This flaw allows authenticated users to execute operating system commands via crafted JavaScript expressions. The vulnerability arises from a failure in the expression...