n8n Python Code Node AST validator bypass

Executive brief

n8n is a workflow automation tool used to connect different software services. A security flaw in its Python code execution component could allow an authorized user to bypass safety restrictions and access sensitive internal system information, such as environment variables. This could lead to the exposure of credentials or configuration data used by the automation platform.

Technical details

A protection mechanism failure (CWE-693) exists in n8n's Python Code node where the Abstract Syntax Tree (AST) security validator can be bypassed. An authenticated attacker with permissions to create or modify workflows can exploit this to access the task executor's module namespace. In specific configurations where environment access is not blocked, this allows for the disclosure of sensitive environment variables. The vulnerability is reachable over the network but requires low-level authenticated privileges. Patches are available in versions 2.25.7 and 2.26.2.

Affected products

• n8n-io n8n >= 2.26.0, < 2.26.2; < 2.25.7

Timeline

• 2026-06-10: disclosed
• 2026-06-16: advisory

References

• https://api.github.com/users/Mistz1
• https://github.com/Mistz1
• https://api.github.com/users/Mistz1/gists%7B/gist_id%7D
• https://api.github.com/users/Mistz1/repos
• https://avatars.githubusercontent.com/u/100209150?v=4
• https://api.github.com/users/Mistz1/events%7B/privacy%7D