U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. ProductsCPE

CPE Summary

Return to Search Listing

CPE Names

Version 2.3: cpe:2.3:a:n8n:n8n:2.3.6:*:*:*:*:node.js:*:*

Version 2.2: cpe:/a:n8n:n8n:2.3.6::~~~node.js~~

Read information about CPE Name encoding

CPE Name Components Select a component to search for similar CPEs

Part:
a
Vendor:
n8n
Product:
n8n
Version:
2.3.6
Target Software:
node.js

Quick Info

Created On:
02/03/2026
Last Modified On:
03/31/2026

Metadata

Titles:

Text Locale
n8n 2.3.6 for Node.js en_US

References:

Type Description URL
Advisory https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/0xxx/CVE-2026-0863.json
Product https://github.com/n8n-io/n8n
Change Log https://github.com/n8n-io/n8n/releases
Advisory https://www.smartkeyss.com/post/cve-2026-0863-python-sandbox-escape-in-n8n-via-exception-formatting-and-implicit-code-execution

CPE Usage

View Vulnerabilities