Detections
Analytics
SCA: security update for n8n (GHSA-62r4-hw23-cc8v)
critical Tenable Self-Hosted Container Security Plugin ID 436488
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- n8n is an open source workflow automation platform. From version 1.0.0 to before 2.0.0, a sandbox bypass
vulnerability exists in the Python Code Node that uses Pyodide. An authenticated user with permission to
create or modify workflows can exploit this vulnerability to execute arbitrary commands on the host system
running n8n, using the same privileges as the n8n process. This issue has been patched in version 2.0.0.
Workarounds for this issue involve disabling the Code Node by setting the environment variable
NODES_EXCLUDE: "[\"n8n-nodes-base.code\"]", disabling Python support in the Code node by setting the
environment variable N8N_PYTHON_ENABLED=false, which was introduced in n8n version 1.104.0, and
configuring n8n to use the task runner based Python sandbox via the N8N_RUNNERS_ENABLED and
N8N_NATIVE_PYTHON_RUNNER environment variables. (CVE-2025-68668)
See Also
Plugin Details
Severity: Critical
ID: 436488
Version: Revision 1.17
Type: Local
Family: SCA Checks
Published: 12/26/2025
Updated: 7/7/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: High
Score: 7.8
Percentile: 99.33
Vendor
Vendor Severity: Critical
CVSS v2
Risk Factor: High
Base Score: 9
Temporal Score: 7
Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C
CVSS Score Source: CVE-2025-68668
CVSS v3
Risk Factor: Critical
Base Score: 9.9
Temporal Score: 8.9
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 12/26/2025
Vulnerability Publication Date: 12/26/2025
Reference Information
CVE: CVE-2025-68668
cwe: CWE-693