{"id":"EUVD-2026-38481","enisaUuid":"f684d4da-fe45-3c16-aec8-0aa03355ce2b","description":"n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authenticated user with permission to create or modify workflows containing a Python Code Node could escape the sandbox and achieve arbitrary code execution on the task runner container. This vulnerability is fixed in 1.123.48, 2.21.8, and 2.22.4.","datePublished":"Jun 23, 2026, 3:50:31 PM","dateUpdated":"Jun 23, 2026, 5:33:53 PM","baseScore":7.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/n8n-io/n8n/security/advisories/GHSA-9pq8-m8gp-4p53\n","aliases":"CVE-2026-49444\nGHSA-9pq8-m8gp-4p53\n","assigner":"GitHub_M","epss":0.39,"enisaIdProduct":[{"id":"1aea65c9-96e5-3b27-a513-e1e73ed7328c","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"2.0.0-rc.0, \u003c 2.21.8"},{"id":"5d5fc569-0ccd-3b69-923d-7a7733fb404e","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"\u003c 1.123.48"},{"id":"fe692808-4abc-3e59-9848-a1193a227fa6","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"2.22.0, \u003c 2.22.4"}],"enisaIdVendor":[{"id":"f91801b4-9fa2-3c82-a082-08d278d9e83d","vendor":{"name":"n8n-io"}}],"enisaIdVulnerability":[{"id":"4cc22004-cd2d-3e0e-b99f-5caa94799ac3","vulnerability":{"id":"CVE-2026-49444","description":"n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authenticated user with permission to create or modify workflows containing a Python Code Node could escape the sandbox and achieve arbitrary code execution on the task runner container. This vulnerability is fixed in 1.123.48, 2.21.8, and 2.22.4.","datePublished":"Jun 23, 2026, 3:50:31 PM","dateUpdated":"Jun 23, 2026, 5:33:53 PM","status":"PUBLISHED","baseScore":7.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/n8n-io/n8n/security/advisories/GHSA-9pq8-m8gp-4p53\n","enisa_id":"EUVD-2026-38481\n","assigner":"GitHub_M","epss":0.39,"dataProcessed":"Oct 28, 2026, 7:18:20 AM","vulnerabilityProduct":[{"id":"0c677476-d6e6-33a8-ad33-3477dca8b4d0","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"2.0.0-rc.0, \u003c 2.21.8"},{"id":"cf5b8466-16e5-3a96-bf88-38c19e9c4199","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"2.22.0, \u003c 2.22.4"},{"id":"e729c6d1-20cc-30d6-ba2c-f1385a170534","product":{"name":"n8n","vendor":{"name":"n8n-io"}},"product_version":"\u003c 1.123.48"}],"vulnerabilityVendor":[{"id":"18ae0645-8153-3295-8fd9-07671fefe5a0","vendor":{"name":"n8n-io"}}]}},{"id":"58829823-db4f-3959-b73f-fed6d2a3f9b8","vulnerability":{"id":"GHSA-9pq8-m8gp-4p53","description":"n8n: Python sandbox escape","datePublished":"Jun 16, 2026, 5:37:21 PM","dateUpdated":"Jul 20, 2026, 1:41:32 PM","baseScore":0.0,"references":"https://github.com/n8n-io/n8n/security/advisories/GHSA-9pq8-m8gp-4p53\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-49444\nhttps://github.com/n8n-io/n8n\n","enisa_id":"EUVD-2026-38481\n","aliases":"CVE-2026-49444\nGHSA-9pq8-m8gp-4p53\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:57:08 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}