https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 20:58:57 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-266444 EUVD-2026-266444 https://cve.radiocsirt.org/vuln/euvd-2026-266444 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0863 <p>Using string formatting and exception handling, an attacker may bypass n8n&#39;s python-task-executor sandbox restrictions and run arbitrary unrestricted Python code in the underlying operating system.</p> <p>The vulnerability can be exploited via the Code block by an authenticated user with basic permissions and can lead to a full n8n instance takeover on instances operating under &#34;Internal&#34; execution mode.</p> <p>If the instance is operating under the &#34;External&#34; execution mode (ex. n8n&#39;s official Docker image) - arbitrary code execution occurs inside a Sidecar container and not the main node, which significantly reduces the vulnerability impact.</p> <p>Using string formatting and exception handling, an attacker may bypass n8n&#39;s python-task-executor sandbox restrictions and run arbitrary unrestricted Python code in the underlying operating system.</p> <p>The vulnerability can be exploited via the Code block by an authenticated user with basic permissions and can lead to a full n8n instance takeover on instances operating under &#34;Internal&#34; execution mode.</p> <p>If the instance is operating under the &#34;External&#34; execution mode (ex. n8n&#39;s official Docker image) - arbitrary code execution occurs inside a Sidecar container and not the main node, which significantly reduces the vulnerability impact.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-0863 https://cve.radiocsirt.org/vuln/ghsa-j6wg-29xj-2fjf <p>Using string formatting and exception handling, an attacker may bypass n8n&#39;s python-task-executor sandbox restrictions and run arbitrary unrestricted Python code in the underlying operating system.</p> <p>The vulnerability can be exploited via the Code block by an authenticated user with basic permissions and can lead to a full n8n instance takeover on instances operating under &#34;Internal&#34; execution mode.</p> <p>If the instance is operating under the &#34;External&#34; execution mode (ex. n8n&#39;s official Docker image) - arbitrary code execution occurs inside a Sidecar container and not the main node, which significantly reduces the vulnerability impact.</p> <p>Using string formatting and exception handling, an attacker may bypass n8n&#39;s python-task-executor sandbox restrictions and run arbitrary unrestricted Python code in the underlying operating system.</p> <p>The vulnerability can be exploited via the Code block by an authenticated user with basic permissions and can lead to a full n8n instance takeover on instances operating under &#34;Internal&#34; execution mode.</p> <p>If the instance is operating under the &#34;External&#34; execution mode (ex. n8n&#39;s official Docker image) - arbitrary code execution occurs inside a Sidecar container and not the main node, which significantly reduces the vulnerability impact.</p> https://cve.radiocsirt.org/vuln/ghsa-j6wg-29xj-2fjf https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0144 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in n8n ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in n8n ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0144