VulnSocial

CVE-2026-42234Disclosure(n8n / n8n)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch n8n n8n systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, an authenticated user with permission to create or modify workflows containing a Python Code Node could escape the sandbox and achieve arbitrary code execution on the task runner container. This issue only affects instances where the Python Task Runner is enabled. This issue has been patched in versions 1.123.32, 2.17.4, and 2.18.1.

n8n CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • n8n

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-05-04); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
n8n
Products
n8n

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-05-04: 1Mentions · 2026-05-05: 1Patch / Workaround · 2026-05-04: 1Technical Details · 2026-05-04: 1Technical Details · 2026-05-05: 105-0405-05
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-05-041
Disclosure1
2026-05-051
General1
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-42234 n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, an authenticated user with permission to create or modify workflow… https://www.cve.org/CVERecord?id=CVE-2026-42234

    Post summary

    This is an initial disclosure of CVE-2026-42234 affecting n8n, where authenticated users able to create or modify workflows are vulnerable; patches are available in versions 1.123.32, 2.17.4, and 2.18.1.

    00010150
    57.4K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-42234 Sandbox Escape and Arbitrary Code Execution in n8n Python Code Node https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42234

    Post summary

    The CVE-2026-42234 concerns sandbox escape and arbitrary code execution in n8n’s Python Code Node, but no PoC, exploit details, active usage, or patch information is included.

    0000043
    4.0K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Appn8nn8n-node.js-
Appn8nn8n2.18.0node.js-

Explore more

Back to dashboardn8n CVEsn8n vulnerabilities