n8n Node.js Package 2.x < 2.4.8 Python Sandbox Escape (CVE-202... | Tenable®

Back Tenable

n8n Node.js Package 2.x < 2.4.8 Python Sandbox Escape (CVE-202... | Tenable®

Tenable • February 13, 2026

Share: View original

The n8n Node.js Package installed on the remote host is affected by a remote code execution vulnerability. (Nessus Plugin ID 298988)

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Remote Code Execution Vulnerabilities in n8n Node.js Package The n8n Node.js Package is affected by multiple remote code execution vulnerabilities. Versions 2.x prior to 2.4.8 and 2.x prior to 2.5.2 are impacted, along with versions below 1.123.17. Users of the affected packages should apply patches to mitigate these vulnerabilities. 2 sources 25

Extracted Entities

MITRE ATT&CK (1)

T1059.006 - Python

Tools (1)

Vulnerabilities (1)

Python Sandbox Escape