Description
n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authenticated user with permission to create or modify workflows containing a Python Code Node could escape the sandbox and achieve arbitrary code execution on the task runner container. This vulnerability is fixed in 1.123.48, 2.21.8, and 2.22.4.
References (1)
Core 1
Core References
X_Refsource_Confirm x_refsource_confirm
https://github.com/n8n-io/n8n/security/advisories/GHSA-9pq8-m8gp-4p53
Scores
CVSS v3
8.5
EPSS
0.0036
EPSS Percentile
28.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-20
Status
published
Products (7)
n8n/n8n
< 1.123.48
n8n-io/n8n
< 1.123.48
n8n-io/n8n
>= 2.0.0-rc.0, < 2.21.8
n8n-io/n8n
>= 2.22.0, < 2.22.4
npm/n8n
0 - 1.123.48npm
npm/n8n
2.0.0-rc.0 - 2.21.8npm
npm/n8n
2.22.0 - 2.22.4npm
Published
Jun 23, 2026
Tracked Since
Jun 23, 2026