CVE-2026-56777 Details
Description
n8n before 2.25.7 and 2.26.x before 2.26.2 contains an abstract syntax tree (AST) security validator bypass in the Python Code node. An authenticated user with permission to create or modify workflows containing a Python Code node can bypass the validator and access the task executor module namespace. The issue only affects self-hosted instances where the Python Task Runner is enabled; where N8N_BLOCK_RUNNER_ENV_ACCESS is configured to allow it, this can disclose environment variables accessible to the task runner process.
A vulnerability exists in n8n versions prior to 2.25.7 and 2.26.x prior to 2.26.2, allowing an authenticated user with permission to create or modify workflows that include a Python Code node to bypass the abstract syntax tree (AST) security validator. This flaw enables access to the task executor module namespace. The vulnerability is present only in self-hosted instances with the Python Task Runner enabled. If the environment variable N8N_BLOCK_RUNNER_ENV_ACCESS is set to allow access, this could lead to the disclosure of environment variables available to the task runner process.
Users should upgrade to n8n versions 2.25.7 or 2.26.2 or later. If an immediate upgrade is not possible, consider limiting workflow creation and editing permissions to trusted users, disabling the Python Code node by adding n8n-nodes-base.code to the NODES_EXCLUDE environment variable, or disabling the Python Task Runner entirely.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 1, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/n8n-io/n8n/security/advisories/GHSA-jwm3-qcfw-c5pp | [email protected] | MitigationVendor Advisory |
| https://www.vulncheck.com/advisories/n8n-ast-validator-bypass-in-python-code-node | [email protected] | Third Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-184 | Incomplete List of Disallowed Inputs | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| n8n n8n | < 2.25.7 >= 2.26.0, < 2.26.2 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 2, 2026 | Initial Analysis | [email protected] |
| Jul 1, 2026 | CVE Modified | CISA-ADP |
| Jun 30, 2026 | New CVE Received | [email protected] |