A security flaw has been found in n8n, a popular workflow automation tool. This vulnerability, identified as an Abstract Syntax Tree (AST) security validator bypass, affects the Python Code node within n8n workflows. It allows an authenticated user, who has the ability to create or change workflows, to gain unauthorized access to critical system components. Specifically, they can bypass a security check and access the task executor module namespace. In self-hosted setups where the Python Task Runner is active and configured to permit it, this could even lead to the exposure of environment variables, potentially revealing sensitive configuration details.<\/p>\n
Product:<\/strong> n8n<\/p>\n Published Date:<\/strong> June 30, 2026<\/p>\n Severity:<\/strong> MEDIUM<\/p>\n Status:<\/strong> Analyzed<\/p>\n The vulnerability impacts n8n versions before 2.25.7 and n8n 2.26.x versions before 2.26.2.<\/p>\n This vulnerability has been analyzed and publicly disclosed.<\/p>\n Rated as MEDIUM severity, this vulnerability could allow an authenticated attacker to access sensitive information or potentially manipulate workflow execution. While not immediately critical, it poses a significant risk, especially in environments handling sensitive data or operations. An attacker must first be an authenticated user with specific permissions. However, successful exploitation could expose environment variables, which often contain sensitive data like API keys, database credentials, or other secrets, thereby increasing the risk of further compromise to the system or connected services.<\/p>\n The most effective way to address this vulnerability is to upgrade your n8n instance. Patched versions are available:<\/p>\n If an immediate upgrade isn’t possible, consider these temporary mitigation steps:<\/p>\n Please note that these workarounds are not full fixes and should only be used as short-term measures until you can apply the official patches.<\/p>\n https:\/\/github.com\/n8n-io\/n8n\/security\/advisories\/GHSA-jwm3-qcfw-c5pp<\/p>\n https:\/\/www.vulncheck.com\/advisories\/n8n-ast-validator-bypass-in-python-code-node<\/p>\n","protected":false},"excerpt":{"rendered":" A security flaw has been found in n8n, a popular workflow automation tool. This vulnerability, identified as an Abstract Syntax Tree (AST) security validator bypass, affects the Python Code node within n8n workflows. It allows an authenticated user, who has the ability to create or change workflows, to gain unauthorized access to critical system components. […]<\/p>\n","protected":false},"author":17,"featured_media":3515,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1185,1067,1186,725,1068],"class_list":["post-3827","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-ast-bypass","tag-n8n","tag-python-code-node","tag-security-vulnerability","tag-workflow-automation"],"blocksy_meta":[],"yoast_head":"\nAffected Products<\/h2>\n
Current Status<\/h2>\n
Severity Level<\/h2>\n
Possible Solutions<\/h2>\n
\n
\n
n8n-nodes-base.code<\/code> to your NODES_EXCLUDE<\/code> environment variable.<\/li>\nReferences<\/h2>\n