CVE-2025-68613

n8n Improper Control of Dynamically-Managed Code Resources Vulnerability

N8N

n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution (RCE) vulnerability in their workflow expression evaluation system. Under certain conditions, expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently isolated from the underlying runtime. An authenticated attacker could abuse…

20. Dez 2025

Ausgewertete Quellen

• Hinweis
  https://www.akamai.com/blog/security-research/2026/feb/zerobot-malware-targets-n8n-automation-platform
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-68613
• CISA
  n8n Improper Control of Dynamically-Managed Code Resources Vulnerability
• NVD
  CVE-2025-68613
• GitHub
  https://github.com/n8n-io/n8n/security/advisories/GHSA-v98v-ff95-f3cp