- CVE-2025-68668 in n8n’s Python Code Node enables arbitrary system command execution
- Attackers with workflow permissions can bypass Pyodide sandbox, risking malware, data theft, and system compromise
- Fixed in n8n v1.111.0; v2.0.0 defaults to secure task-runner Python isolation
A critical-severity vulnerability was recently found in n8n, allowing threat actors to run arbitrary code on the underlying system.
