CVE-2026-72764Published
n8n's JavaScript task runner shared a single module cache across all users' Code-node executions. In affected versions (before 1.123.67, 2.31.5, and 2.32.1), a user able to run a Code node could poison a cached module and thereby alter othe…
Exact source revision recorded 25 Oct 2026 15:19:03 UTC. It does not establish the source's current position. Latest evidence.
nvd · CVE-2026-72764
PublishedNo affected-package array is stated in this source revision. Check its state and earlier observations; this does not establish that every package is unaffected.