CVE-2026-25115
Critical · 9.9CVSS
9.9
EPSS
0.6%
Published
Feb 4, 2026
CISA due date
—
The record
n8n is an open source workflow automation platform. Prior to version 2.4.8, a vulnerability in the Python Code node allows authenticated users to break out of the Python sandbox environment and execute code outside the intended security boundary. This issue has been patched in version 2.4.8.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | n8n | 0 | 2.4.8 |
Related vulnerabilities
- GHSA-8398-gmmx-564h n8n has a Python sandbox escape Same vulnerability
- CVE-2026-54308 n8n is an open source workflow automation platform. Also affects n8n
- CVE-2026-54307 n8n is an open source workflow automation platform. Also affects n8n
- CVE-2026-54304 n8n is an open source workflow automation platform. Also affects n8n
- CVE-2026-54305 n8n is an open source workflow automation platform. Also affects n8n
- CVE-2026-54306 n8n is an open source workflow automation platform. Also affects n8n
- CVE-2026-54302 n8n is an open source workflow automation platform. Also affects n8n
- CVE-2026-54301 n8n is an open source workflow automation platform. Also affects n8n