Advisory Database
  • Advisories
  • Dependency Scanning
  1. npm
  2. ›
  3. n8n
  4. ›
  5. GHSA-jwm3-qcfw-c5pp

GHSA-jwm3-qcfw-c5pp: n8n: Python Code Node AST Validator Bypass

June 16, 2026

An authenticated user with permission to create or modify workflows containing a Python Code node could bypass the AST security validator and access the task executor module namespace. On self-hosted instances where N8N_BLOCK_RUNNER_ENV_ACCESS=false is set, this extended to disclosure of environment variables accessible to the task runner process.

This issue only affects instances where the Python Task Runner is enabled and N8N_BLOCK_RUNNER_ENV_ACCESS=true.

References

  • github.com/advisories/GHSA-jwm3-qcfw-c5pp
  • github.com/n8n-io/n8n/security/advisories/GHSA-jwm3-qcfw-c5pp

Code Behaviors & Features

Detect and mitigate GHSA-jwm3-qcfw-c5pp with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →

Affected versions

All versions before 2.25.7, all versions starting from 2.26.0 before 2.26.2

Fixed versions

  • 2.25.7
  • 2.26.2

Solution

Upgrade to versions 2.25.7, 2.26.2 or above.

Impact 5 MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Learn more about CVSS

Weakness

  • CWE-693: Protection Mechanism Failure

Source file

npm/n8n/GHSA-jwm3-qcfw-c5pp.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Sun, 08 Nov 2026 00:16:02 +0000.