Improper input validation in N8n-io N8n

CVE-2026-49444

n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authenticated user with permission to create or modify workflows containing a Python Code Node could escape the sandbox and achieve arbitrary cod…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

Affected products

  • N8n-io N8n — versions < 1.123.48, >= 2.0.0-rc.0, < 2.21.8, >= 2.22.0, < 2.22.4

Weakness classification (CWE)

References