n8n is an open source workflow automation platform.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. May 4, 2026 · NIST NVD

   Detected

   n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, an authenticated user with permission to create or modify workflows containing a Python Code Node could escape the sandbox and achieve arbitrary code execution on the task runner container. This issue only affects instances where the Python Task Runner is enabled. This issue has been patched in vers

2. Jun 17, 2026 · NIST NVD

   Updated

   n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, an authenticated user with permission to create or modify workflows containing a Python Code Node could escape the sandbox and achieve arbitrary code execution on the task runner container. This issue only affects instances where the Python Task Runner is enabled. This issue has been patched in vers

Affected

• cpe n8n/n8nversion unspecified
• cpe n8n/n8n2.18.0

Sources

• CVE.orgVulnerability recordCVE-2026-42234

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-42234

  n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, an authenticated user with permission to create or modify workflows containing a Python Code Node could escape the sandbox and achieve arbitrary code execution on the task runner c

  nvd.nist.gov

References

• Vendor Advisory · github.com