cvedb.io
CVE-2026-25115
CRITICAL · CVSS 9.9
EPSS exploitation probability: 0%
Published 2026-02-04T17:16:23.877 · Last modified 2026-06-17T10:24:08.067

Summary

n8n is an open source workflow automation platform. Prior to version 2.4.8, a vulnerability in the Python Code node allows authenticated users to break out of the Python sandbox environment and execute code outside the intended security boundary. This issue has been patched in version 2.4.8.

Affected products

n8n — n8n

Does this affect you?

Add your gear to cvedb and we'll alert you only when n8n ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.