CVE-2026-49444
EUVD-2026-3848123.06.2026, 17:17
n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authenticated user with permission to create or modify workflows containing a Python Code Node could escape the sandbox and achieve arbitrary code execution on the task runner container. This vulnerability is fixed in 1.123.48, 2.21.8, and 2.22.4.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| n8n | n8n | 𝑥 < 1.123.48 |
| n8n | n8n | 2.0.0 ≤ 𝑥 < 2.21.8 |
| n8n | n8n | 2.22.0 ≤ 𝑥 < 2.22.4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration