Executive brief
n8n is a workflow automation platform that allows users to build and execute code-based workflows. A vulnerability in the Python Code node allows authenticated users to bypass security restrictions and execute code outside the intended sandbox, potentially compromising the underlying system and accessing sensitive data. This impacts deployments with Task Runners enabled and Python execution capabilities.
Technical details
A Python sandbox escape vulnerability exists in the n8n Code node that allows authenticated users to break out of the Python sandbox environment and achieve arbitrary code execution outside the intended security boundary. The vulnerability requires Task Runners to be enabled (N8N_RUNNERS_ENABLED=true, default false), Python execution to be enabled (N8N_PYTHON_ENABLED=true), and the Code node to be active (default true). Attack vector is network-based with low complexity; authentication is required but the attacker only needs standard user privileges. If Task Runners operate in external mode (sidecar container), the risk is contained; internal mode poses critical risk for lateral movement and system compromise. The vulnerability is fixed in version 2.4.8 and later.
Affected products
- n8n n8n < 2.4.8
Timeline
- 2026-02-04: disclosed
- 2026-02-04: patched: Fixed in version 2.4.8 and later