CVE-2026-25115

CVE-2026-25115 · n8n is vulnerable to Python sandbox escape

This page contains facts from public vulnerability sources. Check the original advisory before updating.

n8n is an open source workflow automation platform. Prior to version 2.4.8, a vulnerability in the Python Code node allows authenticated users to break out of the Python sandbox environment and execute code outside the intended security boundary. This issue has been patched in version 2.4.8.

CVSS 9.4 · Critical · EPSS 0.6% · Fix available

Published: 2026-02-04T16:48:03.955Z
Updated: 2026-02-05T14:33:23.945Z

Stack: node

Affected products and versions

n8n
Versions
- < 2.4.8: Affected
No fix published
n8n npm
Affected ranges
- SEMVER: < 2.4.8
Update to 2.4.8

Original sources

https://github.com/n8n-io/n8n/security/advisories/GHSA-8398-gmmx-564h
https://nvd.nist.gov/vuln/detail/CVE-2026-25115

Check your server →

CVE-2026-25115 · n8n is vulnerable to Python sandbox escape

Affected products and versions

n8n

n8n npm

Original sources