PT-2026-6266 · N8N · N8N

C0Rydoras + 1 · Published 2026-02-04 · Updated 2026-02-05 · CVE-2026-25115

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.4.8

Description n8n is a workflow automation platform. A flaw in the Python Code node allows authenticated users to bypass the Python sandbox and run code outside the intended security limits. The vulnerability allows for arbitrary code execution on the host system.

Recommendations Update to version 2.4.8 or later.

Exploit

Fix

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

BDU:2026-02172

CVE-2026-25115

GHSA-8398-GMMX-564H

Affected Products

N8N

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25115.json · Exploit
• https://github.com/n8n-io/n8n/security/advisories/GHSA-8398-gmmx-564h · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02172 · Security Note
• https://osv.dev/vulnerability/CVE-2026-25115 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-8398-gmmx-564h · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25115 · Security Note
• https://github.com/n8n-io/n8n · Note
• https://github.com/n8n-io/n8n/commit/8607d372f78c388bb3691d9d5b52af7259ec7b1f · Note
• https://github.com/n8n-io/n8n/commit/5c69970acc7d37049deae67da861f92d2aaa9b03 · Note
• https://twitter.com/CVEnew/status/2019110900016509159 · Twitter Post
• https://twitter.com/pulsepatchio/status/2019427523545972997 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2019160112565190840 · Twitter Post
• https://twitter.com/_cvereports/status/2019141429805654247 · Twitter Post
• https://twitter.com/TheHackerWire/status/2019544379229368573 · Twitter Post