Breaking n8n's Expression Sandbox into RCE (CVE-2026-27577) with striga.ai
1–3 of 3 posts
Re: Breaking n8n's Expression Sandbox into RCE (CVE-2026-27577) with striga.ai
#2How Striga uncovered a critical sandbox escape and unsanitized node name injection in n8n's expression engine, chaining them into full Remote Code Execution.
Re: Breaking n8n's Expression Sandbox into RCE (CVE-2026-27577) with striga.ai
#3[flagged]