CVE Intelligence
Analysis AI-assisted

CVE-2026-25115: n8n Python Code Node sandbox escape

CVE-2026-25115 affects n8n versions before 2.4.8 and allows an authenticated user to break out of the Python sandbox used by the Python Code node. NVD scores it 9.9 under CVSS 3.1, and the GitHub CNA scores it 9.4 under CVSS 4.0. The record states the issue is fixed in 2.4.8, and no confirmed exploitation appears in the sources consulted.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

CVE-2026-25115 is a sandbox escape in the Python Code node of n8n, an open source workflow automation platform. According to the record, authenticated users can break out of the Python sandbox and run code outside the intended security boundary. The record classifies the weakness as CWE-693.

Impact

  • NVD rates the issue 9.9 under CVSS 3.1, with vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.
  • The GitHub CNA rates the issue 9.4 under CVSS 4.0.
  • The vector indicates high confidentiality, integrity and availability impact with scope change. This is an inference from the vector string, not a stated outcome.

Affected products and versions

  • The record lists the product as N8n N8n, versions below 2.4.8.
  • The record states the issue is patched in version 2.4.8.
  • The record has no separate fixed-version entry, so the fixed version is taken from the description.

Exploitation status

The record shows this CVE is not listed in the CISA KEV catalog. No confirmed exploitation appears in the sources consulted. EPSS data is not available in the record.

Remediation and mitigation

  • Upgrade n8n to version 2.4.8 or later, as stated in the vendor advisory referenced by the record.
  • Review which accounts can create or edit workflows that use the Python Code node, and limit that access to the minimum required.
  • Follow the vendor advisory for any further guidance.

Detection guidance

  • Inventory n8n instances and their versions to identify those below 2.4.8.
  • Review authentication logs and workflow change history for unexpected modifications to Python Code nodes or unusual executions.
  • Monitor hosts running n8n for unexpected child processes or file and network activity originating from the workflow engine.

Limitations of the available information

The record does not include a CWE name, KEV exploitation details beyond the listing status, EPSS, SSVC or technical analysis of the sandbox flaw. It is unknown whether deployments that restrict node usage are affected differently. The vendor advisory was not reviewed beyond its listing in the record.

Frequently asked questions

Which n8n versions are affected by CVE-2026-25115?

The record lists n8n versions before 2.4.8 as affected. It states the issue is patched in version 2.4.8.

Is this CVE known to be actively exploited?

The record shows it is not listed in the CISA KEV catalog, and no confirmed exploitation appears in the sources consulted.

What should administrators do first?

Identify n8n instances below 2.4.8 and upgrade them, following the vendor advisory. Also review which accounts can create or edit workflows that use the Python Code node.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.