n8n is an open source workflow automation platform that, prior to version 2.4.8, contains a flaw in the Python Code node. Authenticated users can escape the isolated Python sandbox, allowing them to execute arbitrary code beyond the intended boundary. This exposes the entire system to compromise, potentially enabling disclosure, modification, or destruction of data and services, and represents a high‑impact security failure.

All n8n installations from the n8n‑io n8n product running any version earlier than 2.4.8 are affected. The vulnerability exists in the Python Code node component of the platform.

With a CVSS score of 9.4, the flaw is classified as critical, indicating that the attacker can achieve full control over the host system once the attack succeeds. However, the EPSS score is listed as less than 1%, suggesting that exploitation is currently unlikely. The vulnerability is not listed in the CISA KEV catalog. The required preconditions include authenticated access to the instance and ability to insert or execute code through the Python Code node. Successful exploitation results in unrestricted code execution on the host machine, posing a severe threat to confidentiality, integrity, and availability.