What is the CVSS score of CVE-2026-25115?

CVE-2026-25115 has a CVSS 3.1 base score of 9.9 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Python are affected by CVE-2026-25115?

A critical vulnerability in n8n workflow automation platform allows authenticated users to bypass security controls and execute arbitrary code on affected systems.. A patch is available.

How to fix or mitigate CVE-2026-25115?

Within 24 hours: Inventory all n8n deployments and identify which run versions prior to 2.4.8; restrict Python Code node access to trusted users only and disable the feature if not actively used. Within 7 days: Implement network segmentation to isolate n8n instances and monitor for suspicious activity; engage with n8n team for patch availability timeline. Within 30 days: Apply vendor patch immediately upon release; conduct security audit of affected systems for signs of compromise.

Python CVE-2026-25115

CRITICAL

Protection Mechanism Failure (CWE-693)

2026-02-04 security-advisories@github.com

GHSA-8398-gmmx-564h

Python N8n

9.9

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

9.9 CRITICAL

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Feb 04, 2026 - 17:16 nvd

CRITICAL 9.9

DescriptionGitHub Advisory

n8n is an open source workflow automation platform. Prior to version 2.4.8, a vulnerability in the Python Code node allows authenticated users to break out of the Python sandbox environment and execute code outside the intended security boundary. This issue has been patched in version 2.4.8.

AnalysisAI

n8n has a protection mechanism bypass (CVSS 9.9) in the Python sandbox allowing authenticated users to escape code execution restrictions.

Technical ContextAI

n8n < 2.4.8 has a CWE-693 protection mechanism failure in its Python execution sandbox, allowing authenticated users to bypass code execution restrictions and run arbitrary Python code.

RemediationAI

Update n8n to the latest version addressing all four vulnerabilities.

More in Python

View all

CVE-2025-24016 CRITICAL Act Now POC

9.9 Feb 10

Wazuh SIEM platform versions 4.4.0 through 4.9.0 contain an unsafe deserialization vulnerability in the DistributedAPI t

CVE-2025-27520 CRITICAL Act Now POC

9.8 Apr 04

BentoML version 1.4.2 and earlier contains an unauthenticated remote code execution vulnerability through insecure deser

CVE-2025-2945 CRITICAL Act Now POC

9.9 Apr 03

pgAdmin 4 contains critical remote code execution vulnerabilities in the Query Tool download and Cloud Deployment endpoi

CVE-2013-5093 MEDIUM This Month POC

6.8 Sep 27

The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python

CVE-2025-32375 CRITICAL Act Now POC

9.8 Apr 09

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Rated critica

CVE-2014-0224 HIGH Act Now POC

7.4 Jun 05

OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph

CVE-2024-21644 HIGH Act Now POC

7.5 Jan 08

pyLoad download manager version prior to 0.5.0b3.dev77 exposes the Flask SECRET_KEY through an unauthenticated endpoint.

CVE-2017-9462 HIGH Act Now POC

8.8 Jun 06

In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and conse

CVE-2026-39987 CRITICAL Act Now POC

9.3 Apr 08

Unauthenticated remote code execution in Marimo ≤0.20.4 allows attackers to execute arbitrary system commands via the `/

CVE-2024-21645 MEDIUM This Month POC

5.3 Jan 08

pyLoad is the free and open-source Download Manager written in pure Python. Rated medium severity (CVSS 5.3), this vulne

CVE-2026-33017 CRITICAL Act Now POC

9.3 Mar 17

Langflow (a visual LLM pipeline builder) contains a critical unauthenticated code execution vulnerability (CVE-2026-3301

CVE-2026-55255 HIGH Act Now POC

8.4 Jun 19

Cross-user flow execution in Langflow (< 1.9.1) lets any authenticated API-key holder run another user's flow by passing

Same weakness CWE-693 – Protection Mechanism Failure

View all

CVE-2013-2465 CRITICAL POC

9.8

CVE-2013-0431 MEDIUM POC

5.3

CVE-2025-40536 HIGH POC

8.1

CVE-2026-21513 HIGH

8.8

CVE-2026-21510 HIGH POC

8.8

CVE-2026-32202 MEDIUM POC

4.3

CVE-2017-10952 HIGH POC

8.8

CVE-2022-32845 CRITICAL POC

10.0

CVE-2026-25115 vulnerability details – vuln.today

Back

Python CVE-2026-25115

Severity by source

CVSS VectorGitHub Advisory

Lifecycle Timeline

DescriptionGitHub Advisory

AnalysisAI

Technical ContextAI

RemediationAI

More in Python

Same weakness CWE-693 – Protection Mechanism Failure

Share

External POC / Exploit Code