Detections
Analytics
SCA: security update for n8n (GHSA-5xrp-6693-jjx9)
critical Tenable Self-Hosted Container Security Plugin ID 437391
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- n8n contains a critical Remote Code Execution (RCE) vulnerability in its workflow Expression evaluation
system. Expressions supplied by authenticated users during workflow configuration may be evaluated in an
execution context that is not sufficiently isolated from the underlying runtime. An authenticated attacker
could abuse this behavior to execute arbitrary code with the privileges of the n8n process. Successful
exploitation may lead to full compromise of the affected instance, including unauthorized access to
sensitive data, modification of workflows, and execution of system-level operations. (CVE-2026-1470)
See Also
Plugin Details
Severity: Critical
ID: 437391
Version: Revision 1.9
Type: Local
Family: SCA Checks
Published: 1/29/2026
Updated: 7/30/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 5
Percentile: 93.94
Vendor
Vendor Severity: Critical
CVSS v2
Risk Factor: High
Base Score: 9
Temporal Score: 7
Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C
CVSS Score Source: CVE-2026-1470
CVSS v3
Risk Factor: Critical
Base Score: 9.9
Temporal Score: 8.9
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 1/27/2026
Vulnerability Publication Date: 1/27/2026
Reference Information
CVE: CVE-2026-1470
cwe: CWE-95