---
id: "CVE-2026-119408"
kind: "vulnerability"
aliases: ["CVE-2026-119408"]
title: "n8n: deprecated Function nodes let authenticated users run code on server"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-tooling", "langchain", "n8n", "self-hosted", "workflow-automation"]
not_affected_if: ["fixed-version", "no-workflow-editor-access"]
published_at: "2026-10-30T12:16:37+00:00"
first_seen_at: "2026-10-30T12:30:23+00:00"
updated_at: "2026-10-30T12:32:00+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119408", "first_seen_at": "2026-10-30T12:30:23+00:00"}]
---

# n8n: deprecated Function nodes let authenticated users run code on server

n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 lets authenticated users who can create, modify, or import workflows run JavaScript in the n8n main process through deprecated Function, Function Item, and LangChain Code nodes. The affected nodes run outside task runner isolation, so the attacker can execute code with the privileges of the n8n server.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed n8n version with `n8n --version` or the image tag in your deployment.
- Look for workflows that use the deprecated Function, Function Item, or LangChain Code node types.
- Confirm whether task runner isolation is enabled for your n8n instance.

## Fix

- n8n `2.42.6` for the 2.42 line
- n8n `2.43.3` for the 2.43 line
- n8n `3.0.1` for the 3.x line

## Timeline

- 2026-10-30T12:30:23+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-119408

## From the sources

n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execution vulnerability via deprecated Function, Function Item, and LangChain Code nodes running outside task runner isolation. Authenticated users who can create, modify, or import workflows naming these hidden node types can execute JavaScript in the n8n main process.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_