CVE-2026-0863

CVE-2026-0863 affects n8n’s python-task-executor sandbox. A crafted payload via the Code block, by an authenticated user with basic permissions, can bypass sandbox restrictions through string formatting and exception handling, enabling arbitrary Python code execution on the host in Internal execu...