Advisory Database
  • Advisories
  • Dependency Scanning
  1. npm
  2. ›
  3. n8n
  4. ›
  5. GHSA-jwm3-qcfw-c5pp

GHSA-jwm3-qcfw-c5pp: n8n: Python Code Node AST Validator Bypass

June 16, 2026

An authenticated user with permission to create or modify workflows containing a Python Code node could bypass the AST security validator and access the task executor module namespace. On self-hosted instances where N8N_BLOCK_RUNNER_ENV_ACCESS=false is set, this extended to disclosure of environment variables accessible to the task runner process.

This issue only affects instances where the Python Task Runner is enabled and N8N_BLOCK_RUNNER_ENV_ACCESS=true.

References

  • github.com/advisories/GHSA-jwm3-qcfw-c5pp
  • github.com/n8n-io/n8n/security/advisories/GHSA-jwm3-qcfw-c5pp

Code Behaviors & Features

Detect and mitigate GHSA-jwm3-qcfw-c5pp with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →

Affected versions

All versions before 2.25.7, all versions starting from 2.26.0 before 2.26.2

Fixed versions

  • 2.25.7
  • 2.26.2

Solution

Upgrade to versions 2.25.7, 2.26.2 or above.

Impact 5 MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Learn more about CVSS

Weakness

  • CWE-693: Protection Mechanism Failure

Source file

npm/n8n/GHSA-jwm3-qcfw-c5pp.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Tue, 23 Jun 2026 12:23:07 +0000.