n8n Sandbox Escape: How CVE-2025-68668 Turns Workflows into Weapons

According to Rhoda Smart, a vulnerability in the n8n workflow automation platform tracked as CVE-2025-68668 lets authenticated users escape the Python sandbox and run arbitrary operating system commands, delivering a near-maximum CVSS score of 9.9. The flaw stems from Pyodide’s interoperability, which links Python and JavaScript within the same process and connects untrusted Python code to the privileged Node.js runtime, breaking the intended isolation of the Python Code Node.

The attack chain is straightforward: Python imports the JavaScript bridge, which then grants access to Node.js APIs and enables system command execution, resulting in full remote code execution with the same privileges as the n8n process. The report characterises this as a trust boundary collapse across execution layers, turning a workflow-level feature into a host-level compromise.

The vulnerability affects versions 1.0.0 up to, but not including, 2.0.0, and has been patched in 2.0.0; for those unable to upgrade immediately, disabling Python execution via the N8N_PYTHON_ENABLED=false flag neutralises the threat.