AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2026-0863

HIGH · CVSS 8.5 EPSS 8.50% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-01-18 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.5. It affects Docker. Public exploit code or proof-of-concept references have been detected in its references. Exploitation may require the attacker to be authenticated.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit arbitrary code execution code execution
GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-0863
Severity
HIGH
CVSS
8.5
EPSS
8.50%
Docker

Original NVD Description

Using string formatting and exception handling, an attacker may bypass n8n's python-task-executor sandbox restrictions and run arbitrary unrestricted Python code in the underlying operating system. The vulnerability can be exploited via the Code block by an authenticated user with basic permissions and can lead to a full n8n instance takeover on instances operating under "Internal" execution mode. If the instance is operating under the "External" execution mode (ex. n8n's official Docker image) - arbitrary code execution occurs inside a Sidecar container and not the main node, which significantly reduces the vulnerability impact.

Related CVEs

Other vulnerabilities affecting the same vendor(s)