n8n is an open source workflow automation platform. From version 1.0.0 to before 2.0.0, a sandbox bypass vulnerability exists in the Python Code Node that uses Pyodide. An authenticated user with permission to create or modify workflows can exploit this vulnerability to execute arbitrary commands on the host system running n8n, using the same privileges as the n8n process. This issue has been patched in version 2.0.0. Workarounds for this issue involve disabling the Code Node by setting the environment variable NODES_EXCLUDE: "[\"n8n-nodes-base.code\"]", disabling Python support in the Code node by setting the environment variable N8N_PYTHON_ENABLED=false, which was introduced in n8n version 1.104.0, and configuring n8n to use the task runner based Python sandbox via the N8N_RUNNERS_ENABLED and N8N_NATIVE_PYTHON_RUNNER environment variables.

The version of the n8n Node.js Package installed on the remote host is 1.x prior to 2.0.0. It is, therefore, affected by an arbitrary command execution vulnerability:

  - n8n is an open source workflow automation platform. From version 1.0.0 to before 2.0.0, a sandbox bypass     vulnerability exists in the Python Code Node that uses Pyodide. An authenticated user with permission     to create or modify workflows can exploit this vulnerability to execute arbitrary commands on the host     system running n8n, using the same privileges as the n8n process. Workarounds for this issue involve     disabling the Code Node by setting the environment variable NODES_EXCLUDE, disabling Python support     in the Code node by setting the environment variable N8N_PYTHON_ENABLED=false, which was introduced     in n8n version 1.104.0, and configuring n8n to use the task runner based Python sandbox via the     N8N_RUNNERS_ENABLED and N8N_NATIVE_PYTHON_RUNNER environment variables.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its banner, the version of n8n running on the remote host is 1.0.0 or later and before 2.0.0. It is, therefore, affected by multiple vulnerabilities:

- An authenticated arbitrary file read and file write vulnerability

- An authenticated arbitrary command execution vulnerability in Pyodide based Python code node

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - n8n is an open source workflow automation platform. From version 1.0.0 to before 2.0.0, a sandbox bypass
    vulnerability exists in the Python Code Node that uses Pyodide. An authenticated user with permission to
    create or modify workflows can exploit this vulnerability to execute arbitrary commands on the host system
    running n8n, using the same privileges as the n8n process. This issue has been patched in version 2.0.0.
    Workarounds for this issue involve disabling the Code Node by setting the environment variable
    NODES_EXCLUDE: "[\"n8n-nodes-base.code\"]", disabling Python support in the Code node by setting the
    environment variable N8N_PYTHON_ENABLED=false, which was introduced in n8n version 1.104.0, and
    configuring n8n to use the task runner based Python sandbox via the N8N_RUNNERS_ENABLED and
    N8N_NATIVE_PYTHON_RUNNER environment variables. (CVE-2025-68668)

ID	Name	Product	Family	Type	Severity
282599	n8n Node.js Package 1.x < 2.0.0 Arbitrary Command Execution (N8scape)	Nessus	Misc.	Local	critical
115103	N8n < 2.0.0 Multiple Vulnerabilities	Web App Scanning	Artificial Intelligence	Version Based	critical
436488	SCA: security update for n8n (GHSA-62r4-hw23-cc8v)	Tenable Cloud Security	SCA Checks	Local	critical
436488	SCA: security update for n8n (GHSA-62r4-hw23-cc8v)	Tenable Self-Hosted Container Security	SCA Checks	Local	critical

Detections

Analytics

CVE-2025-68668

critical

Tenable Plugins

critical

critical

critical

critical