What is CVE-2026-56777?

CVE-2026-56777 is a medium-severity vulnerability in N8n, classified under Incomplete List of Disallowed Inputs. CVSS score: 5.0/10. Published 2026-06-30.

How severe is CVE-2026-56777?

Medium severity. CVSS v3 base score is 5.0 out of 10.

Vulnerability in N8n

CVE-2026-56777

n8n before 2.25.7 and 2.26.x before 2.26.2 contains an abstract syntax tree (AST) security validator bypass in the Python Code node. An authenticated user with permission to create or modify workflows containing a Python Code node can bypa…

CVSS v3 metric

CVSS v3 base score 5.0 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N.

Affected products

N8n — versions 0, 2.26.2, 2.25.7

Weakness classification (CWE)

CWE-184 — Incomplete List of Disallowed Inputs

References

disclosure@vulncheck.com (vendor-advisory)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-56777?: CVE-2026-56777 is a medium-severity vulnerability in N8n, classified under Incomplete List of Disallowed Inputs. CVSS score: 5.0/10. Published 2026-06-30.
How severe is CVE-2026-56777?: Medium severity. CVSS v3 base score is 5.0 out of 10.