Pillar n8n Sandbox Escape Vulnerabilities (CVSS 10)
Date: 2026-01
Affected: n8n Workflow Platform
Attack vector: rce
Category: research
Severity: Critical

Pillar Security reported two CVSS-10 sandbox escape vulnerabilities to n8n workflow platform allowing complete server takeover and credential theft. Patched in n8n v2.4.0.


Mitigations:

Architectural layers (MAESTRO):