PT-2026-6266

CVE-2026-25115

Published

2026-02-04

Updated

2026-02-05

Description by

CVSS 3.1

9.9

Critical

MetricsAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.4.8

Description n8n is a workflow automation platform. A flaw in the Python Code node allows authenticated users to bypass the Python sandbox and run code outside the intended security limits. The vulnerability allows for arbitrary code execution on the host system.

Recommendations Update to version 2.4.8 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

C0Rydoras

Marcopolopie

Vendors

Affected products

Weakness enumeration

CWE-693: Protection Mechanism Failure