FROM A SCHEMA NAME TO RCE IN N8N

Summary from the TLDR InfoSec newsletter

A critical prototype pollution vulnerability (CVE-2026-33696) in n8n allows authenticated attackers to achieve remote code execution across all deployment types by manipulating the GSuiteAdmin node's "Custom Fields" schema. By polluting ⁠Object.prototype⁠, attackers can chain the exploit through a subsequent Git node to inject a malicious ⁠GIT_SSH_COMMAND⁠ or crash the instance entirely by breaking the underlying database query builder. Administrators must immediately upgrade their self-hosted, worker, and Cloud instances to the latest patched versions to secure their environments against malicious schema-name inputs.