Loading story…
Security researchers disclosed critical remote code execution (RCE) vulnerabilities in popular self-hosted automation/data platforms that rely on sandboxed expression/formula execution. In n8n, JFrog researcher Natan Nehorai reported CVE-2026-1470 (CVSS 9.9), where authenticated users can abuse the platform’s Expression evaluation to escape the sandbox and execute arbitrary code with the privileges of the n8n process, including via a crafted JavaScript payload in an “Edit Fields” block that can reach Node.js capabilities (e.g., invoking child_process). In Grist-Core, Cyera Research Labs detailed CVE-2026-24002 (CVSS 9.1), dubbed Cellbreak, in which a malicious spreadsheet formula can break out of the Pyodide/WASM sandbox and execute OS commands or host-runtime JavaScript, collapsing the intended boundary between untrusted cell logic and host execution.
Mitigations center on upgrading to fixed releases and validating whether affected sandboxing modes are enabled. Grist maintainers said the issue is addressed in Grist 1.7.9 and advised administrators to check the Admin Panel sandboxing setting: instances using gvisor are not affected, while those using pyodide should update. The Grist disclosure also notes the flaw class is similar to prior Pyodide sandbox-escape issues that have impacted other products (including n8n in earlier reporting), reinforcing that blocklist-style sandboxing approaches can be brittle when untrusted code is evaluated in environments with access to host runtime primitives.
See affected versions and whether adversaries are exploiting it.
3 events from the most recent confirmed update back to the earliest known activity.
A critical n8n vulnerability, CVE-2026-1470, was publicly reported by JFrog Security researcher Natan Nehorai as an authenticated remote code execution flaw in the platform's Expression evaluation system. The report included technical details and a proof-of-concept showing how low-privileged users could escape the sandbox and execute OS commands via Node.js child_process.
Cyera Research Labs publicly disclosed CVE-2026-24002, codenamed 'Cellbreak,' and credited researcher Vladimir Tokarev with its discovery. The disclosure described how a blocklist-based Pyodide sandbox in Grist-Core could be bypassed to achieve host command execution and host-runtime JavaScript execution, and advised mitigations such as using gVisor and avoiding unsafe Deno bypass settings.
Grist released version 1.7.9 to fix CVE-2026-24002, a critical Pyodide sandbox escape in Python formula execution that could lead to remote code execution, filesystem access, and secret exposure. The issue affected the self-hosted open-source Grist-Core product, with exposure depending in part on sandbox configuration.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A critical vulnerability dubbed **Cellbreak** (CVE-2026-24002, **CVSS 9.1**) was disclosed in *Grist-Core*, an open-source relational spreadsheet-database, enabling **remote code execution** via malicious spreadsheet formulas. The issue is a **Pyodide sandbox escape** in Grist’s Python formula execution model, allowing attackers to break out of cell-level logic and execute host OS commands or host-runtime JavaScript, potentially exposing filesystem data, secrets, and credentials (e.g., database credentials and API keys) and enabling broader compromise. The flaw was reported as stemming from insufficient isolation and a bypassable blocklist approach in the Pyodide-based formula engine; exploitation can leverage Python introspection to reach sensitive built-ins (e.g., `__builtins__`) and invoke system-level functionality (e.g., importing `os` and calling `os.system()`), with additional risk noted from accessible modules such as `ctypes`. The issue was addressed in **Grist 1.7.9**; mitigations include upgrading and avoiding configurations that weaken isolation (notably the `GRIST_PYODIDE_SKIP_DENO` setting) when untrusted formulas may be processed, with Grist moving Pyodide formula execution under the *Deno* JavaScript runtime by default.
Jun 29, 2026
JFrog researchers disclosed two vulnerabilities in the *n8n* workflow automation platform that allow an **authenticated** attacker to escape built-in sandboxes and achieve **remote code execution (RCE)** on the main n8n node, potentially leading to full instance compromise and access to sensitive connected systems (e.g., APIs, credentials, and internal tooling). The issues are tracked as **CVE-2026-1470** (CVSS **9.9**) and **CVE-2026-0863** (CVSS **8.5**); exploitation is possible even in configurations where n8n runs in “internal” execution mode, which n8n documentation already warns is risky for production due to weaker isolation between the application and task runner processes. Technical details indicate both flaws are sandbox escapes driven by language/runtime edge cases: **CVE-2026-1470** abuses JavaScript expression sandboxing (including `with`-statement handling) to resolve a constructor path to `Function` and execute arbitrary JavaScript, while **CVE-2026-0863** escapes the Python task executor sandbox via Python introspection and runtime behavior (notably Python 3.10+ `AttributeError.obj`) to regain access to restricted builtins/imports and execute OS commands. Recommended remediation is to upgrade n8n to fixed versions (for **CVE-2026-1470**: `1.123.17`, `2.4.5`, or `2.5.1`; for **CVE-2026-0863**: `1.123.14`, `2.3.5`, or `2.4.2`).
Jun 29, 2026
A **critical remote code execution** issue in the *n8n* open-source workflow automation platform, tracked as **CVE-2026-25049** (also published as **GHSA-6cqr-8cfr-67f8**), allows an **authenticated** user with permission to create or modify workflows to escape n8n’s expression sandbox and execute arbitrary system commands on the underlying host. The flaw stems from **insufficient input sanitization/weak sandboxing** in n8n’s expression evaluation (server-side JavaScript) and was identified during follow-up analysis after an earlier critical n8n vulnerability (**CVE-2025-68613**) was patched; researchers report the new issue effectively **bypasses prior mitigations**. Reporting indicates exploitation can lead to **full compromise** of the n8n instance, including access to the filesystem and the ability to **steal stored credentials and secrets** (e.g., API keys, OAuth tokens) and sensitive configuration, with potential for **pivoting** into connected internal services and cloud accounts in multi-tenant deployments. Public reporting also notes **public exploits** are available. n8n maintainers state the issue is patched, and affected organizations should upgrade to fixed releases (**1.123.17** and **2.5.2**), as versions **prior to 1.123.17 and 2.5.2** are impacted.
Jun 29, 2026