Marcopolopie

An authenticated user with permission to create or modify workflows could exploit the Python Code node to escape the sandbox. The sandbox did not sufficiently restrict access to certain built-in Python objects, potentially allowing an attacker to exfiltrate file contents or achieve Remote Code Execution (RCE). On instances using internal Task Runners (default runner mode), this could lead to a full compromise of the n8n host. On instances using external Task Runners, an attacker might gain access to or impact other tasks executed on the Task Runner. Task Runners must be enabled using the `N8N RUNNERS ENABLED` variable.

n8n is a workflow automation platform. A flaw in the Python Code node allows authenticated users to bypass the Python sandbox and run code outside the intended security limits. The vulnerability allows for arbitrary code execution on the host system.