修正 n8n 沙箱逃逸样本的入口点和关键操作语义 - #73
Open
ccsosd wants to merge 1 commit into
Open
Conversation
## 概要 本 PR 修复了多个 n8n 样本的漏洞语义标注问题，主要针对人工备注中指出的 `entry_point`、`critical_operation` 或漏洞链路语义不准确问题进行复查和修正。 ## 修改样本 * `entry-00099` / `entry-00100`：n8n Workflow Expression Sandbox Escape 复查 RCE sink 是否应落在 sanitizer 上，并修正相关语义标注。 * `entry-00103`：n8n webhook XSS / CSP 绕过 重新确认并修正 `critical_operation` 的定位。 * `entry-00176`：n8n Python Code 节点沙箱逃逸 修正人工备注指出的 `critical_operation` 明显定位到静态列表的问题。 * `entry-00511` / `entry-00512`：n8n VM 表达式引擎沙箱逃逸 复查并修正 `entry_point` 或 `critical_operation` 存在语义疑问的位置。 ## 交付物 每个样本目录下均补充或更新： * `entries.fixed.jsonl` * `review_notes.md` * `review_diff.csv` Related to Tencent#6
ccsosd
marked this pull request as ready for review
July 26, 2026 04:41
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
概要
本 PR 修复了多个 n8n 样本的漏洞语义标注问题，主要针对人工备注中指出的
entry_point、critical_operation或漏洞链路语义不准确问题进行复查和修正。修改样本
entry-00099/entry-00100：n8n Workflow Expression Sandbox Escape复查 RCE sink 是否应落在 sanitizer 上，并修正相关语义标注。
entry-00103：n8n webhook XSS / CSP 绕过重新确认并修正
critical_operation的定位。entry-00176：n8n Python Code 节点沙箱逃逸修正人工备注指出的
critical_operation明显定位到静态列表的问题。entry-00511/entry-00512：n8n VM 表达式引擎沙箱逃逸复查并修正
entry_point或critical_operation存在语义疑问的位置。交付物
每个样本目录下均补充或更新：
entries.fixed.jsonlreview_notes.mdreview_diff.csvRelated to #6