AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

n8nGHSA-44v6-jhgm-p3m4

n8n has a Python Task Runner Sandbox Escape Vulnerability

n8n

CVE-2026-42234 · Published Apr 29, 2026 · updated May 8, 2026

High7.5
Fix: upgrade to 1.123.32 or later (3 fixed versions below)
GitHub advisory

Impact

An authenticated user with permission to create or modify workflows containing a Python Code Node could escape the sandbox and achieve arbitrary code execution on the task runner container.

  • This issue only affects instances where the Python Task Runner is enabled.

Patches

The issue has been fixed in n8n versions 1.123.32, 2.17.4, and 2.18.1. Users should upgrade to one of these versions or later to remediate the vulnerability.

Workarounds

If upgrading is not immediately possible, administrators should consider the following temporary mitigations:

  • Limit workflow creation and editing permissions to fully trusted users only.
  • Disable the Python Code node by adding n8n-nodes-base.code to the NODES_EXCLUDE environment variable, or disable the Python Task Runner entirely.

These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.

Affected versions

PackageAffectedFixed in
n8n
npm
< 1.123.321.123.32
>= 2.18.0, < 2.18.12.18.1
>= 2.17.0, < 2.17.42.17.4
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity from
GitHub (reviewed advisory)
Weakness
CWE-94
Also known as
CVE-2026-42234

More n8n advisories

All n8n
Critical 9.9Apr 29n8n has XML Node Prototype Pollution that to RCECVE-2026-42232fixed in 1.123.32 +2Critical 10.0Apr 29n8n has Prototype Pollution in XML Webhook Body Parser that Leads to RCECVE-2026-42231fixed in 1.123.32 +2High 8.2Apr 29n8n Vulnerable to XSS via MCP OAuth clientCVE-2026-42235fixed in 1.123.32 +2High 8.5Apr 29n8n's Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key ReplayCVE-2026-42226fixed in 1.123.33 +1Medium 7.7Apr 29n8n has Public API Variables IDOR that Allows Cross-Project Secret DisclosureCVE-2026-42227fixed in 1.123.32 +2High 7.5Apr 29n8n Vulnerable to Unauthenticated Denial of Service via MCP Client RegistrationCVE-2026-42236fixed in 1.123.32 +2