TLDR Tech / InfoSec
From a Schema Name to RCE in n8n
A critical prototype pollution vulnerability (CVE-2026-33696) in n8n allows authenticated attackers to achieve remote code execution across all deployment types by manipulating the GSuiteAdmin node's "Custom Fields" schema. By polluting Object.prototype, attackers can chain the exploit through a subsequent Git node to inject a malicious GIT_SSH_COMMAND or crash the instance entirely by breaking the underlying database query builder. Administrators must immediately upgrade their self-hosted, worker, and Cloud instances to the latest patched versions to secure their environments against malicious schema-name inputs.
Read the full story