CVE-2026-27494 is a critical (CVSS 9.9) sandbox escape in the n8n Python Code node. A user who can create or modify workflows could read file contents or achieve remote code execution. Upgrade to 2.10.1, 2.9.3 or 1.123.22, and limit workflow editing to people you trust.
What's affected
n8n versions before 2.10.1, 2.9.3 and 1.123.22. The fixed releases are 2.10.1, 2.9.3 and 1.123.22, one for each release line.
The impact depends on runner mode. With internal Task Runners, the default runner mode, the n8n host could be fully compromised. With external Task Runners, an attacker might reach other tasks on the runner. Task Runners must be enabled with N8N_RUNNERS_ENABLED set to true.
How to check if you're exposed
n8n --version
Then check how runners are configured, and who holds permission to create or edit workflows. The attack needs an authenticated user with that permission, so the number of such users is your exposure.
What to do now
- Upgrade n8n to 2.10.1, 2.9.3 or 1.123.22 or later.
- Limit workflow creation and editing to fully trusted users, as the advisory recommends.
- As a short term option, disable the Code node by adding n8n-nodes-base.code to the NODES_EXCLUDE environment variable.
- Treat both workarounds as temporary, since the advisory says they do not fully remediate the risk.
- Review recent workflow changes for code you do not recognize.
Why it matters
The record lists CWE-497, exposure of sensitive system information to an unauthorized control sphere. The sandbox did not sufficiently restrict access to certain built in Python objects, which let code step outside it.
Workflow tools run code on behalf of users by design, so a weak sandbox turns edit rights into host access. Treat workflow editors as code authors. The record does not mark this CVE as known exploited.
Try it yourself
Click through it at your own pace, or open it full screen.
Quick check
Who can exploit it?
An authenticated user with permission to create or modify workflows.
Sources
- CVE-2026-27494 on Gold
- GitHub advisory listed in the record: https://github.com/n8n-io/n8n/security/advisories/GHSA-mmgg-m5j7-f83h
- Release listed in the record: https://github.com/n8n-io/n8n/releases/tag/n8n@2.10.1
Last reviewed: 19 October 2026.
