CVE-2026-42234

HIGH SEVERITY

CVSS Score & Metrics

Base Score

7.5 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H                                    

Vulnerability Description

n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, an authenticated user with permission to create or modify workflows containing a Python Code Node could escape the sandbox and achieve arbitrary code execution on the task runner container. This issue only affects instances where the Python Task Runner is enabled. This issue has been patched in versions 1.123.32, 2.17.4, and 2.18.1.

Vulnerability Details

Published Date

April 29, 2026

Last Modified

May 06, 2026

CWE ID

CWE-94

Source

GitHub

Vendor

npm

Product

n8n

External References

https://github.com/n8n-io/n8n/security/advisories/GHSA-44v6-jhgm-p3m4
https://github.com/advisories/GHSA-44v6-jhgm-p3m4

CVE-2026-42234

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment