Vulnerabilitycritical
Critical and High Severity n8n Sandbox Flaws Allow RCE
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-0863 | Using string formatting and exception handling, an attacker may bypass n8n's python-task-executor sandbox restrictions and run arbitrary unrestricted Python… | 9.9 | 9% | PoC ×2 | |
| CVE-2026-1470 | Authenticated RCE via Workflow Expression Evaluation in n8n | 9.9 | 20% | PoC |
From the original article
2 min read at infosecurity-magazine.com
Two serious security flaws affecting the n8n workflow automation platform have exposed weaknesses in the product’s sandboxing mechanisms for JavaScript and Python code.
By Alessandro Mascellino · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.