DEV Community

Cover image for n8n Patches More Critical Command Injection and Sandbox Escape Flaws
BeyondMachines for BeyondMachines

Posted on • Originally published at beyondmachines.net

n8n Patches More Critical Command Injection and Sandbox Escape Flaws

Summary

n8n patched multiple security vulnerabilities, including critical flaws that allow for Python sandbox escapes, command injection, and arbitrary file access, potentially leading to full host compromise.

Take Action:

Update your self-hosted n8n instances to version 2.7.1 immediately. There are a bunch of critical flaws and they are going to be exploited soon. If you can't update, disable the Python Code node and move Task Runners to external mode to isolate potential exploits from your main process.


Read the full article on BeyondMachines


This article was originally published on BeyondMachines

Top comments (0)