Loading story…
A critical vulnerability (CVE-2025-68668) has been disclosed in the open-source workflow automation platform n8n, allowing authenticated users with workflow creation or modification permissions to execute arbitrary system commands on the host system. The flaw, rated 9.9 on the CVSS scale, is due to a protection mechanism failure in the Python Code Node, which leverages Pyodide for code execution. This vulnerability affects all n8n versions from 1.0.0 up to, but not including, 2.0.0, and has been fully addressed in version 2.0.0. The issue enables attackers to run commands with the same privileges as the n8n process, potentially leading to data access, lateral movement, or further compromise depending on deployment.
n8n has provided several mitigation steps, including disabling the Code Node or Python support via environment variables, and recommends enabling the task runner-based Python sandbox for improved isolation. The vulnerability was reported by security researcher csuermann and published under advisory GHSA-62r4-hw23-cc8v. Users are strongly advised to upgrade to version 2.0.0 or apply the recommended workarounds to mitigate the risk of exploitation. The disclosure highlights the importance of securing workflow automation platforms, especially those handling sensitive integrations and credentials.
See real exploitation activity before you spend the cycle.
4 events from the most recent confirmed update back to the earliest known activity.
Multiple sources disclosed CVE-2025-68668 as a critical 9.9 CVSS vulnerability in n8n's Python Code Node that can let authenticated users execute arbitrary system commands on the host. Public guidance recommended upgrading to 2.0.0 or applying mitigations such as disabling the Code Node, disabling Python support, or enabling the task runner-based sandbox.
n8n resolved CVE-2025-68668 in version 2.0.0 by making a task runner-based native Python implementation the default, replacing the riskier Pyodide-based approach. The fix addresses affected versions from 1.0.0 up to but not including 2.0.0.
Security researcher csuermann reported a critical sandbox-bypass flaw in n8n's Python Code Node, later tracked as CVE-2025-68668 and published under advisory GHSA-62r4-hw23-cc8v. The issue allows authenticated users with workflow creation or modification permissions to execute arbitrary system commands.
n8n previously introduced a task runner-based native Python implementation as an optional feature in version 1.111.0. This later became relevant as a mitigation path for the Python Code Node vulnerability.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
5 references tracked. Mallory keeps watching after this page renders.
vulncheck.com
Open sourcethehackernews.com
Open sourcethecyberexpress.com
Open sourcesocradar.io
Open sourcecybersecuritynews.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A critical vulnerability, CVE-2025-68613, has been discovered in the n8n open-source workflow automation platform, allowing authenticated users with workflow creation or editing permissions to execute arbitrary system commands on the underlying server. This flaw, rated 9.9 on the CVSS scale, stems from improper sandboxing of JavaScript expressions within workflow definitions, enabling attackers to escape restrictions and gain system-level access. The vulnerability does not require administrative privileges, making it a significant risk in environments with multiple users or weak access controls, and could lead to full system compromise, data exfiltration, workflow sabotage, and lateral movement. Another related vulnerability, CVE-2025-68668, also enables sandbox escape in n8n, turning workflows into potential attack vectors. Both vulnerabilities highlight the urgent need for organizations using n8n to review user permissions, apply available patches, and implement strong access controls to mitigate the risk of exploitation. While there is no current evidence of active exploitation, the ease of attack and the platform's popularity make immediate remediation essential.
Jun 29, 2026
A critical remote code execution vulnerability, tracked as CVE-2026-21877, has been identified in the n8n workflow automation platform. The flaw, rated CVSS 10.0, allows authenticated users to execute arbitrary code on affected n8n instances, posing a significant risk to environments where n8n is used to automate workflows with access to sensitive data, internal systems, and credentials. The vulnerability impacts n8n versions from 0.123.0 up to but not including 1.121.3, affecting both self-hosted and managed deployments. Exploitation requires authenticated access, and the vulnerability is linked to unsafe handling that can result in the execution of untrusted code. The issue has been addressed in n8n version 1.121.3 and later, and users are strongly advised to upgrade immediately to mitigate the risk. Additional recommendations include restricting workflow modification access to trusted administrators, blocking high-risk nodes at runtime, and reviewing audit logs for suspicious activity prior to patching. No public exploit details or proof-of-concept have been released as of the latest advisories. Organizations using n8n should prioritize patching and implement hardening measures to prevent potential compromise of their automation infrastructure.
Jun 29, 2026A critical vulnerability, tracked as CVE-2025-68613, was discovered in the n8n workflow automation platform, allowing authenticated users to execute arbitrary code on affected instances. The flaw, which impacts versions 0.211.0 up to but not including 1.120.4, arises from insufficient isolation of user-supplied expressions during workflow configuration, potentially leading to full system compromise, unauthorized data access, and modification of workflows. The vulnerability has a CVSS score of 9.9, and over 100,000 potentially exposed instances have been identified globally, with the highest concentrations in the U.S., Germany, France, Brazil, and Singapore. Security advisories urge immediate patching to versions 1.120.4, 1.121.1, or 1.122.0 to mitigate the risk. For organizations unable to patch immediately, it is recommended to restrict workflow creation and editing permissions to trusted users and to deploy n8n in a hardened environment with limited operating system privileges and network access. The Canadian Centre for Cyber Security and other authorities have issued alerts emphasizing the criticality of this vulnerability and the urgent need for remediation.
Jun 29, 2026