Task Runner in n8n 2.0.2 (and other n8n 2 beta versions) ignores N8N_RUNNERS_STDLIB_ALLOW=* and blocks ALL imports (stdlib & external)

[Linux-bootloader]

Bug Description

Summary

When running n8n v2.0.2 with an external Task Runner (n8nio/runners:latest), the Python Code node throws import errors for every type of import, even when explicit allow rules are configured to permit everything.

Example error:

Import of standard library module '<package>' is disallowed. Allowed stdlib modules: none

This occurs for:

• Standard library modules (e.g., json, os, subprocess)
• External modules (even when installed in the runner container)
• ANY import statement — nothing is allowed

Even with:

N8N_RUNNERS_STDLIB_ALLOW=*
N8N_RUNNERS_EXTERNAL_ALLOW=*

…the Task Runner treats the allowed lists as empty.

This makes Python Code nodes essentially unusable when using the external Task Runner.

To Reproduce

Steps to Reproduce

1. docker-compose.yml:

services:
  n8n:
    image: n8nio/n8n:2.0.2
    env_file:
      - .env
    container_name: n8n
    ports:
      - "81:443"
      - "5679:5679"
      - "587:587"
    volumes:
      - n8n_data:/home/node/.n8n
    environment:
      N8N_RUNNERS_AUTH_TOKEN: ${N8N_RUNNERS_AUTH_TOKEN}
      N8N_RUNNERS_BROKER_LISTEN_ADDRESS: ${N8N_RUNNERS_BROKER_LISTEN_ADDRESS}
      N8N_RUNNERS_MODE: ${N8N_RUNNERS_MODE}
      N8N_RUNNERS_ENABLED: ${N8N_RUNNERS_ENABLED}
      N8N_NATIVE_PYTHON_RUNNER: ${N8N_NATIVE_PYTHON_RUNNER}
    restart: always

  task-runners:
    image: n8nio/runners:latest
    env_file:
      - .env
    container_name: n8n-task-runner
    depends_on:
      - n8n
    environment:
      N8N_RUNNERS_TASK_BROKER_URI: ${RUNNERS_TASK_BROKER_URI}
      N8N_RUNNERS_AUTH_TOKEN: ${RUNNERS_AUTH_TOKEN}
      N8N_RUNNERS_AUTO_SHUTDOWN_TIMEOUT: ${N8N_RUNNERS_AUTO_SHUTDOWN_TIMEOUT}
      N8N_RUNNERS_STDLIB_ALLOW: ${N8N_RUNNERS_STDLIB_ALLOW}
      N8N_RUNNERS_EXTERNAL_ALLOW: ${N8N_RUNNERS_EXTERNAL_ALLOW}
    restart: unless-stopped

2. .env file:

N8N_RUNNERS_ENABLED=true
N8N_RUNNERS_MODE=external
N8N_RUNNERS_BROKER_LISTEN_ADDRESS=0.0.0.0
N8N_RUNNERS_AUTH_TOKEN=pass
N8N_NATIVE_PYTHON_RUNNER=true

RUNNERS_TASK_BROKER_URI=http://n8n:5679
RUNNERS_AUTH_TOKEN=pass
N8N_RUNNERS_AUTO_SHUTDOWN_TIMEOUT=15

N8N_RUNNERS_STDLIB_ALLOW=*
N8N_RUNNERS_EXTERNAL_ALLOW=*

3. In a Python Code node:

import json
return {"ok": True}

4. Run the workflow.

Expected behavior

Expected Behaviour

Given:

N8N_RUNNERS_STDLIB_ALLOW=*
N8N_RUNNERS_EXTERNAL_ALLOW=*

…the Python Runner should allow:

• All standard library modules
• All Python packages installed in the image
• Typical imports used for file I/O, subprocess, API integrations, data parsing, etc.

Actual Behavior

Every import statement fails, including json, the most basic stdlib module.

Example:

Import of standard library module 'json' is disallowed. Allowed stdlib modules: none

Same happens for ANY other module — stdlib or external.

The allow lists behave as if they were completely empty, even when configured to allow everything (*).

Debug Info

Debug info

core

• n8nVersion: 2.0.2
• platform: docker (self-hosted)
• nodeJsVersion: 22.21.0
• nodeEnv: production
• database: sqlite
• executionMode: regular
• concurrency: -1
• license: enterprise (production)
• consumerId: c2cb5070-7bcf-4796-b058-0b50ec6940b0

storage

• success: all
• error: all
• progress: false
• manual: true
• binaryMode: filesystem

pruning

• enabled: true
• maxAge: 336 hours
• maxCount: 10000 executions

client

• userAgent: mozilla/5.0 (x11; cros x86_64 14541.0.0) applewebkit/537.36 (khtml, like gecko) chrome/142.0.0.0 safari/537.36
• isTouchDevice: false

Generated at: 2025-12-13T10:34:24.702Z

Operating System

Debain Linux

n8n Version

2.0.2

Node.js Version

22.21.0

Database

SQLite (default)

Execution mode

main (default)

Hosting

self hosted

[n8n-assistant]

Hey @Linux-bootloader,

Thank you for reaching out! We’ve received your issue and are looking into it. To help us track this internally, we’ve created a Linear ticket with the reference: "GHC-5896".

We’ll keep you updated as we make progress, but if you have any additional details or context to share, feel free to add them here - it’s always helpful!

Thanks for your patience and for bringing this to our attention.

---

For INTERNAL use only: GHC-5896

[LaurensBosscher]

For triage, #23120 is probably the same issue.

[jkramer5103]

Have this problem too

[ItsSmarti]

I also have that problem with 2.1.1

[aliveranme]

Have this problem too

[rtroncosogar]

Same issue here

[Makoish]

Check merwan's reply

https://community.n8n.io/t/libraries-desallowed-in-n8n-code-node-n8n-cloud/203666/10

[Linux-bootloader]

Check merwan's reply

https://community.n8n.io/t/libraries-desallowed-in-n8n-code-node-n8n-cloud/203666/10

Thanks mate I will give it a go and get back if it works.

[saicrazyfire]

If you need to fix it for self-hosted instances, I was able to get it working via #23120 (comment)

[jkramer5103]

Hi, i tried it, but im stuck. It just loads until it times out, it doesnt seem to do anything, here is my docker compose and n8n runners, can someone please help me?

n8n-task-runners.json

{
  "task-runners": [
    {
      "runner-type": "javascript",
      "workdir": "/home/runner",
      "command": "/usr/local/bin/node",
      "args": [
        "--disallow-code-generation-from-strings",
        "--disable-proto=delete",
        "/opt/runners/task-runner-javascript/dist/start.js"
      ],
      "health-check-server-port": "5681",
      "allowed-env": [
        "PATH",
        "GENERIC_TIMEZONE",
        "NODE_OPTIONS",
        "N8N_RUNNERS_AUTO_SHUTDOWN_TIMEOUT",
        "N8N_RUNNERS_TASK_TIMEOUT",
        "N8N_RUNNERS_MAX_CONCURRENCY",
        "N8N_SENTRY_DSN",
        "NODE_FUNCTION_ALLOW_BUILTIN",
        "NODE_FUNCTION_ALLOW_EXTERNAL"
      ]
    },
    {
      "runner-type": "python",
      "workdir": "/home/runner",
      "command": "/usr/local/bin/python",
      "args": [
        "/opt/runners/task-runner-python/dist/start.py"
      ],
      "health-check-server-port": "5682",
      "allowed-env": [
        "PATH",
        "PYTHONPATH",
        "GENERIC_TIMEZONE",
        "N8N_RUNNERS_AUTO_SHUTDOWN_TIMEOUT",
        "N8N_RUNNERS_TASK_TIMEOUT",
        "N8N_RUNNERS_MAX_CONCURRENCY",
        "N8N_SENTRY_DSN"
      ]
    }
  ]
}

docker-compose.yaml

version: "3.8"

services:
  n8n:
    image: n8nio/n8n:latest
    container_name: n8n
    restart: unless-stopped
    ports:
      - "5678:5678"
    environment:
      - N8N_TIMEZONE=Europe/Berlin
      - N8N_USER_FOLDER=/home/node/.n8n

      - N8N_RUNNERS_ENABLED=true
      - N8N_RUNNERS_MODE=external
      - N8N_RUNNERS_BROKER_LISTEN_ADDRESS=0.0.0.0
      - N8N_RUNNERS_AUTH_TOKEN=${N8N_RUNNERS_AUTH_TOKEN}
      - N8N_NATIVE_PYTHON_RUNNER=true

      - N8N_SECURE_COOKIE=false
      - N8N_PROTOCOL=http
      - N8N_PORT=5678
      - N8N_HOST=${DOMAIN}
      - N8N_EDITOR_BASE_URL=https://${DOMAIN}/
      - WEBHOOK_URL=https://${DOMAIN}/
      - N8N_PROXY_HOPS=1
      - N8N_ENCRYPTION_KEY=${N8N_ENCRYPTION_KEY}
      - N8N_DEFAULT_BINARY_DATA_MODE=filesystem
      - DB_TYPE=sqlite

    volumes:
      - ./n8n_data:/home/node/.n8n
    user: "1000:1000"

  task-runners:
    image: n8nio/runners:latest
    container_name: n8n-runners
    restart: unless-stopped
    environment:
      - N8N_RUNNERS_TASK_BROKER_URI=http://n8n:5679
      - N8N_RUNNERS_AUTH_TOKEN=${N8N_RUNNERS_AUTH_TOKEN}

      # WICHTIG: OHNE Anführungszeichen!
      - N8N_RUNNERS_STDLIB_ALLOW=*
      - N8N_RUNNERS_EXTERNAL_ALLOW=*
      - NODE_FUNCTION_ALLOW_BUILTIN=*
      - NODE_FUNCTION_ALLOW_EXTERNAL=*

      - N8N_RUNNERS_TASK_TIMEOUT=120
      - N8N_RUNNERS_AUTO_SHUTDOWN_TIMEOUT=15

    volumes:
      # KORREKTER Pfad: /etc/n8n-task-runners.json
      - ./n8n-task-runners.json:/etc/n8n-task-runners.json

    depends_on:
      - n8n

[MookieLian]

Thank you for bringing this up! It looks like this issue is a duplicate of #23120, where we're already tracking progress and updates. To keep things organised, we'll close this issue and continue the discussion over there.

If you have any additional details or context that might help, please feel free to add them to the original issue. Your input is always appreciated!

Thanks again for your contribution, and let us know if there's anything else we can assist with.

---

A minimal n8n-task-runners.json to bind.

{
        "task-runners": [
                {
                        "runner-type": "javascript",
                        "workdir": "/home/runner",
                        "command": "/usr/local/bin/node",
                        "args": [
                                "--disallow-code-generation-from-strings",
                                "--disable-proto=delete",
                                "/opt/runners/task-runner-javascript/dist/start.js"
                        ],
                        "health-check-server-port": "5681",
                        "allowed-env": [
                                "PATH",
                                "GENERIC_TIMEZONE",
                                "NODE_OPTIONS",
                                "N8N_RUNNERS_AUTO_SHUTDOWN_TIMEOUT",
                                "N8N_RUNNERS_TASK_TIMEOUT",
                                "N8N_RUNNERS_MAX_CONCURRENCY",
                                "N8N_SENTRY_DSN",
                                "N8N_VERSION",
                                "ENVIRONMENT",
                                "DEPLOYMENT_NAME",
                                "HOME"
                        ],
                        "env-overrides": {
                                "NODE_FUNCTION_ALLOW_BUILTIN": "*",
                                "NODE_FUNCTION_ALLOW_EXTERNAL": "*",
                                "N8N_RUNNERS_HEALTH_CHECK_SERVER_HOST": "0.0.0.0"
                        }
                },
                {
                        "runner-type": "python",
                        "workdir": "/home/runner",
                        "command": "/opt/runners/task-runner-python/.venv/bin/python",
                        "args": ["-m", "src.main"],
                        "health-check-server-port": "5682",
                        "allowed-env": [
                                "PATH",
                                "N8N_RUNNERS_LAUNCHER_LOG_LEVEL",
                                "N8N_RUNNERS_AUTO_SHUTDOWN_TIMEOUT",
                                "N8N_RUNNERS_TASK_TIMEOUT",
                                "N8N_RUNNERS_MAX_CONCURRENCY",
                                "N8N_SENTRY_DSN",
                                "N8N_VERSION",
                                "ENVIRONMENT",
                                "DEPLOYMENT_NAME"
                        ],
                        "env-overrides": {
                                "PYTHONPATH": "/opt/runners/task-runner-python",
                                "N8N_RUNNERS_STDLIB_ALLOW": "*",
                                "N8N_RUNNERS_EXTERNAL_ALLOW": "*"
                        }
                }
        ]
}

#closed:duplicate