What is GHSA-m7jc-p4hf-xhwq?

GHSA-m7jc-p4hf-xhwq is a security advisory published by GitHub Security Advisories with High severity. Duplicate Advisory: Legacy Expression Evaluator Sanitizer Bypass Leads to Authenticated Code Execution

Why does GHSA-m7jc-p4hf-xhwq have no CVE ID yet?

GitHub Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by GHSA-m7jc-p4hf-xhwq?

GHSA-m7jc-p4hf-xhwq affects 1 product, including: npm/n8n:\u003c 1.123.64.

⚠ Withdrawn by GitHub Security Advisories

Withdrawn: July 22, 2026

GHSA-m7jc-p4hf-xhwqHighDisclosed before NVD

Duplicate Advisory: Legacy Expression Evaluator Sanitizer Bypass Leads to Authenticated Code Execution

Vendor

GitHub Security Advisories

Published

July 22, 2026

Last Modified

July 22, 2026

📋 Description

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-pm35-fqvh-cq5g. This link is maintained to preserve external references.

Original Description

n8n contains a sanitizer bypass vulnerability in the legacy expression evaluator's computed-member handler. An authenticated user with workflow create or modify permissions can craft a malicious expression to bypass the sanitizer and achieve host-level code execution as the n8n process. The legacy expression engine is the default in affected versions. Fixed in n8n 1.123.64, 2.29.8, and 2.30.1.

🎯 Affected products1

npm/n8n:< 1.123.64

🔗 References (4)

https://github.com/n8n-io/n8n/security/advisories/GHSA-pm35-fqvh-cq5g
https://nvd.nist.gov/vuln/detail/CVE-2026-65591
https://www.vulncheck.com/advisories/n8n-before-sanitizer-bypass-remote-code-execution
https://github.com/advisories/GHSA-m7jc-p4hf-xhwq