Executive brief
n8n is a workflow automation platform that allows users to create and execute workflows containing various code nodes. A sandbox bypass vulnerability in the Python Code Node permits authenticated users with workflow modification permissions to execute arbitrary system commands with the privileges of the n8n process, potentially compromising the entire system. This represents a critical risk to any organization running n8n where untrusted users have workflow access.
Technical details
A sandbox escape exists in the Pyodide-based Python Code Node implementation that allows authenticated users to break out of the intended Python sandbox. The vulnerability affects n8n versions 1.0.0 through 1.x, where Pyodide is used for Python code isolation. An attacker with permission to create or modify workflows can execute arbitrary commands on the host system with the same privileges as the n8n process. The vulnerability was addressed in n8n 2.0.0 by introducing a task-runner-based native Python implementation as the default (optional in version 1.111.0+). Workarounds include disabling the Code Node entirely, disabling Python support, or enabling the secure task-runner sandbox.
Affected products
- n8n n8n 1.0.0 to 1.x; patched in 2.0.0
Timeline
- 2025-12-24: disclosed
- 2.0.0: patched