n8n: Python sandbox escape
n8n
- Severity
- High, CVSS 8.5
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
- Record
- CVE-2026-49444
- Affects
- n8n
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- June 23, 2026
- Source last modified
- October 26, 2026
Description
n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authenticated user with permission to create or modify workflows containing a Python Code Node could escape the sandbox and achieve arbitrary code execution on the task runner container. This vulnerability is fixed in 1.123.48, 2.21.8, and 2.22.4.
Description quoted from the NVD record.
Who is affected
This flaw affects n8n, a platform for automating tasks by linking apps and services into step-by-step workflows. It affects versions before 1.123.48, 2.21.8 and 2.22.4. Someone who already has an account and is allowed to create or change workflows that include a step running Python code could break out of the protected space meant to contain that code. They could then run any commands they choose on the part of the system that runs workflow code. This flaw is rated High.
What to do
- If you or someone at your organization installed and runs n8n, that person should update it to one of the fixed versions named for this flaw:
1.123.48,2.21.8or2.22.4. - If an IT provider or vendor runs n8n for your organization, send them this advisory and ask when the update will be done.
- If you are not sure which version of n8n you use, ask the person who looks after it to check and compare it with the fixed versions above.
Analysis written from the source record as of October 26, 2026 and reviewed before publishing.