n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process

N8n, a workflow automation platform, had a high-severity expression-sandbox escape that could allow authenticated workflow editors to execute operating system commands on the server. The vulnerability stemmed from a flawed identifier-rewriting mechanism and a second blind spot in property checks. While the vendor has r…