{"schema":"threatline.record/2","record":{"id":"GHSA-9p7v-45m2-wxgj","aliases":["GHSA-9p7v-45m2-wxgj"],"summary":"Deprecated Code Nodes Allow Code Execution in the n8n Main Process","details":"## Impact\n\nThe Function and Function Item nodes run user code in the vm2 sandbox, and the LangChain Code node runs user code in the n8n main process. An authenticated user with permission to create or modify workflows could use these nodes to execute arbitrary code in the n8n main process, outside the task runner isolation that applies to the Code node.\n\n## Patches\n\nIn n8n versions 2.42.6, 2.43.3, 2.44.0 and 3.0.1, the Function, Function Item, and LangChain Code nodes are deprecated and blocked by default. Saving a workflow that adds or modifies one of these nodes is rejected; workflows already saved with these nodes continue to run unchanged. Administrators should review existing workflows and replace these nodes with the Code node.\n\nThe block can be disabled with `N8N_DEPRECATED_NODES_BLOCK=false`, which restores the vulnerable behavior.\n\nUsers should upgrade to one of these versions or later to remediate the vulnerability.\n\n## Workarounds\n\nIf upgrading is not immediately possible, administrators should consider the following temporary mitigations:\n- Add `n8n-nodes-base.function`, `n8n-nodes-base.functionItem`, and `@n8n/n8n-nodes-langchain.code` to the `NODES_EXCLUDE` environment variable to prevent these nodes from being used.\n- Limit workflow creation and editing permissions to fully trusted users only.\n\nThese workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.","categories":["Frameworks"],"product":"n8n","vendor":"","ecosystem":null,"affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-9p7v-45m2-wxgj","source_modified_at":"2026-10-28T08:47:05Z","fetched_at":"2026-10-28T15:55:58.673066Z","package":{"ecosystem":"npm","name":"n8n"},"range":"< 2.43.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-9p7v-45m2-wxgj","source_modified_at":"2026-10-28T08:47:05Z","fetched_at":"2026-10-28T15:55:58.673066Z","package":{"ecosystem":"npm","name":"n8n"},"range":"< 2.42.6"},{"source":"GitHub Advisory Database","source_url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-9p7v-45m2-wxgj","source_modified_at":"2026-10-28T08:47:05Z","fetched_at":"2026-10-28T15:55:58.673066Z","package":{"ecosystem":"npm","name":"n8n"},"range":"< 3.0.1"}],"fixed_versions":[],"cvss":8.7,"severity":"High","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-28T08:47:05Z","modified_at":"2026-10-28T08:47:05Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-9p7v-45m2-wxgj","fetched_at":"2026-10-28T15:55:58.673066Z","source_modified_at":"2026-10-28T08:47:05Z"}],"sources":["GitHub Advisory Database"],"references":[],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-28T08:47:05Z","content_hash":"08959457a7b0db4b5d2679391ebc9325ec30ed3ad6466de1dfd07419a1386821"}}