CVE-2025-68668: n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node

Published Dec 26, 2025
·
Updated

Impact A sandbox bypass vulnerability exists in the Python Code Node that uses Pyodide.

An authenticated user with permission to create or modify workflows can exploit this vulnerability to execute arbitrary commands on the host system running n8n, using the same privileges as the n8n process.

Patches In n8n version 1.111.0, a task-runner-based native Python implementation was introduced as an optional feature, providing a more secure isolation model.

To enable it, you need to configure the N8NRUNNERSENABLED and N8NNATIVEPYTHONRUNNER environment variables.

This implementation became the default starting with n8n version 2.0.0.

Workarounds - Disable the Code Node by setting the environment variable NODESEXCLUDE: "[\"n8n-nodes-base.code\"]" (Docs) - Disable Python support in the Code node by setting the environment variable N8NPYTHONENABLED=false, which was introduced in n8n version 1.104.0. - Configure n8n to use the task runner based Python sandbox via the N8NRUNNERSENABLED and N8NNATIVEPYTHONRUNNER environment variables. (Docs)

Resources - n8n documentation: Blocking access to nodes - n8n documentation: Code Node (Python) - n8n documentation: Task Runners

Other sources

n8n is an open source workflow automation platform. From version 1.0.0 to before 2.0.0, a sandbox bypass vulnerability exists in the Python Code Node that uses Pyodide. An authenticated user with permission to create or modify workflows can exploit this vulnerability to execute arbitrary commands on the host system running n8n, using the same privileges as the n8n process. This issue has been patched in version 2.0.0. Workarounds for this issue involve disabling the Code Node by setting the environment variable NODESEXCLUDE: "[\"n8n-nodes-base.code\"]", disabling Python support in the Code node by setting the environment variable N8NPYTHONENABLED=false, which was introduced in n8n version 1.104.0, and configuring n8n to use the task runner based Python sandbox via the N8NRUNNERSENABLED and N8NNATIVEPYTHONRUNNER environment variables.

MITRE

Affected Software

2 affected componentsFixes available
npm/n8n>=1.0.0<2.0.0
2.0.0
n8n N8n Node.js>=1.0.0<2.0.0

Event History

Dec 26, 2025
Advisory Published
via GitHub·06:18 PM
Data Sourced
via GitHub·06:18 PM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·09:49 PM
Data Sourced
via MITRE·09:49 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2025-68668?

CVE-2025-68668 is considered a high severity vulnerability due to its potential for arbitrary command execution.

2

How do I fix CVE-2025-68668?

To address CVE-2025-68668, upgrade n8n to version 2.0.0 or later.

3

Who is affected by CVE-2025-68668?

CVE-2025-68668 affects authenticated users with permissions to create or modify workflows in n8n versions 1.0.0 to 2.0.0.

4

What type of vulnerability is CVE-2025-68668?

CVE-2025-68668 is a sandbox bypass vulnerability affecting the Python Code Node utilizing Pyodide.

5

What can attackers do with CVE-2025-68668?

Exploiting CVE-2025-68668 allows attackers to execute arbitrary commands on the host system with the same privileges as the n8n process.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203