CVE-2025-68668
published 2025-12-26CVE-2025-68668: n8n is an open source workflow automation platform. From version 1.0.0 to before 2.0.0, a sandbox bypass vulnerability exists in the Python Code Node that uses…
PriorityP274critical9.9CVSS 3.1
AVNACLPRLUINSCCHIHAH
EPSS
12.68%
95.8th percentile
n8n is an open source workflow automation platform. From version 1.0.0 to before 2.0.0, a sandbox bypass vulnerability exists in the Python Code Node that uses Pyodide. An authenticated user with permission to create or modify workflows can exploit this vulnerability to execute arbitrary commands on the host system running n8n, using the same privileges as the n8n process. This issue has been patched in version 2.0.0. Workarounds for this issue involve disabling the Code Node by setting the environment variable NODES_EXCLUDE: "[\"n8n-nodes-base.code\"]", disabling Python support in the Code node by setting the environment variable N8N_PYTHON_ENABLED=false, which was introduced in n8n version 1.104.0, and configuring n8n to use the task runner based Python sandbox via the N8N_RUNNERS_ENABLED and N8N_NATIVE_PYTHON_RUNNER environment variables.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| n8n-io | n8n | — | — |
| n8n | n8n | >= 1.0.0 < 2.0.0 | 2.0.0 |
| n8n | n8n | >= 1.0.0 < 2.0.0 | 2.0.0 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node
osv·2025-12-26
CVE-2025-68668 [CRITICAL] n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node
n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node
### Impact
A sandbox bypass vulnerability exists in the Python Code Node that uses Pyodide.
An authenticated user with permission to create or modify workflows can exploit this vulnerability to execute arbitrary commands on the host system running n8n, using the same privileges as the n8n process.
### Patches
In n8n version 1.111.0, a task-runner-based native Python implementation was introduced as an optional feature, providing a more secure isolation model.
To enable it, you need to configure the `N8N_RUNNERS_ENABLED` and `N8N_NATIVE_PYTHON_RUNNER` environment variables.
This implementation became the default starting with n8n version 2.0.0.
### Workarounds
- Disable the Code Node by setting the environ
GHSA
n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node
ghsa·2025-12-26
CVE-2025-68668 [CRITICAL] CWE-693 n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node
n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node
### Impact
A sandbox bypass vulnerability exists in the Python Code Node that uses Pyodide.
An authenticated user with permission to create or modify workflows can exploit this vulnerability to execute arbitrary commands on the host system running n8n, using the same privileges as the n8n process.
### Patches
In n8n version 1.111.0, a task-runner-based native Python implementation was introduced as an optional feature, providing a more secure isolation model.
To enable it, you need to configure the `N8N_RUNNERS_ENABLED` and `N8N_NATIVE_PYTHON_RUNNER` environment variables.
This implementation became the default starting with n8n version 2.0.0.
### Workarounds
- Disable the Code Node by setting the environ
No detection rules found.
No public exploits indexed.
2025-12-26
Published