n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authenticated user with permission to create or modify workflows containing a Python Code Node could escape the sandbox due to a CWE‑20 (Improper Input Validation) flaw and achieve arbitrary code execution on the task runner container. This vulnerability is fixed in 1.123.48, 2.21.8, and 2.22.4.

The open‑source workflow automation platform n8n is affected. Versions prior to 1.123.48, 2.21.8, and 2.22.4 are vulnerable; users running these versions are at risk only if they have authenticated permissions to create or modify workflows containing Python Code Nodes. Those with no such permissions are not able to exploit this vulnerability.

The CVSS score of 7.1 reflects a high severity and medium- to high-level exploitation potential. The risk is limited to authenticated users who have workflow creation or editing rights, but once exploited the attacker gains unrestricted access to the task runner environment. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, indicating that while it is serious, there is no confirmed exploitation in the wild at this time.