High priorityDisclosed

Advisory · CVE-2026-119408

n8n deprecated Function nodes escape task runner isolation

n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 lets authenticated workflow authors run JavaScript in the main process via deprecated Function nodes.

Advisory published October 30, 2026Independent summary
Vendor
n8n
Product
n8n
Identifier / CWE
CVE-2026-119408
CWE-653
Action timing
Immediate
ELI5

Explain it like I’m five

n8n is supposed to run custom code in a sealed room away from the main program. These old code blocks were left outside the sealed room, so anyone allowed to build a workflow can run code as the main program itself.

SIMPLIFIED_ATTACK_PATH04 STEPS
  1. 01Authenticated workflow author

    An authenticated user who can create, modify, or import workflows targets a hidden deprecated node type.

  2. 02Hidden node named

    The workflow names a deprecated Function, Function Item, or LangChain Code node.

  3. 03Isolation bypass

    The node runs outside task runner isolation instead of inside the sandbox.

  4. 04Main process execution

    The supplied JavaScript executes in the n8n main process.

What happened

n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execution vulnerability via deprecated Function, Function Item, and LangChain Code nodes running outside task runner isolation. Authenticated users who can create, modify, or import workflows naming these hidden node types can execute JavaScript in the n8n main process. The record rates it high at CVSS 8.8.

The vendor advisory fixes the flaw in n8n 2.42.6, 2.43.3, and 3.0.1. Any instance where less-trusted users can author workflows is exposed, and imported workflows from untrusted sources are a direct delivery route.

What to do

  1. Inventory n8n instances and identify which versions each runs.
  2. Upgrade to 2.42.6, 2.43.3, or 3.0.1, matching the release line in use.
  3. Until upgraded, restrict workflow creation and import to trusted users and review imported workflows for deprecated Function, Function Item, and LangChain Code nodes.
  4. Review workflow and audit logs for unexpected workflow imports or executions by non-admin authors.
  5. Verify the deployed version after upgrading.

Management note

Workflow builders are code authors, and this flaw removes the boundary that was supposed to contain them. Treat every n8n instance with untrusted workflow authors as exposed until it is on a fixed release.