An authenticated user with permission to create or modify workflows containing a Python Code Node in n8n can escape the sandbox and execute arbitrary code on the task runner container. This vulnerability affects only instances where the Python Task Runner is enabled. The issue is fixed in n8n versions 1.123.32, 2.17.4, and 2.18.1. Temporary mitigations include restricting workflow editing permissions to trusted users and disabling the Python Code node or the Python Task Runner. These mitigations do not fully eliminate the risk and upgrading is recommended.