internet-facing-service-vulnerabilityproof-of-concept-releasewidely-deployed-product-advisoryrapid-weaponization

Multiple n8n Vulnerabilities Enable RCE, Sandbox Escapes, and Stored XSS

Active Exploitation · 11 sources · Updated 4mo ago · First seen Feb 27, 2026

Security researchers and CVE disclosures reported multiple vulnerabilities in the n8n workflow automation platform that can enable remote code execution (RCE), sandbox escapes, and stored XSS under various conditions. Akamai highlighted exploitation interest from Zerobot targeting n8n via CVE-2025-68613, a critical expression-evaluation sandboxing failure affecting versions 0.211.0 through 1.20.4 (and 1.21.1/1.22.0), where a logged-in (non-admin) user could break out of the expression context to execute arbitrary code, read/write server files, steal environment variables (e.g., API keys), and establish persistence; a public PoC was noted as available.

Subsequent advisories describe additional n8n flaws patched after the earlier expression-sandbox issue, generally requiring an authenticated user who can create/modify workflows, except where noted. CVE-2026-27577 covers further expression-evaluation abuse leading to host command execution; CVE-2026-27495 describes a JavaScript Task Runner sandbox escape that can lead to full host compromise when internal runners are used (enabled via N8N_RUNNERS_ENABLED=true), with external runner mode (N8N_RUNNERS_MODE=external) reducing blast radius; CVE-2026-27497 describes potential RCE and arbitrary file write via the Merge node in SQL query mode; and CVE-2026-27578 describes stored XSS across multiple nodes (e.g., Webhook/Form/Chat-related nodes) enabling session hijacking/account takeover when victims view affected pages. CVE-2026-27493 adds a second-order, potentially unauthenticated expression injection path via Form nodes (triggered by crafted input beginning with = under specific workflow configurations) that can escalate to RCE only when chained with a separate sandbox escape. Fixes are reported in n8n 2.10.1 (and, depending on branch, 2.9.3 / 1.123.22), with interim mitigations including restricting workflow edit permissions and disabling specific nodes via NODES_EXCLUDE (e.g., n8n-nodes-base.webhook, n8n-nodes-base.merge, n8n-nodes-base.form, n8n-nodes-base.formTrigger).

This is being exploited nowSee which actors are running it and whether you're in range.

Check your exposure

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

7 events · Dec 15, 2025 – Mar 25, 2026

Mar 25, 20267mo ago
n8n fixes CVE-2026-33660 Merge node AlaSQL RCE flaw
n8n fixed CVE-2026-33660, a vulnerability in the Merge node's 'Combine by SQL' mode that let authenticated users with workflow creation or modification rights read local files and potentially achieve remote code execution. The flaw affected versions prior to 2.14.1, 2.13.3, and 1.123.26, and n8n advised immediate upgrades and temporary mitigations such as restricting workflow editing and disabling the Merge node.
CVE-2026-33660 - n8n Has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode
Mar 25, 20267mo ago
n8n fixes CVE-2026-33696 prototype pollution RCE flaw
n8n fixed CVE-2026-33696, a prototype pollution vulnerability in the XML and GSuiteAdmin nodes that could let authenticated users with workflow creation or modification rights achieve remote code execution. The issue affected versions prior to 2.14.1, 2.13.3, and 1.123.27, and n8n advised immediate upgrades plus temporary mitigations such as restricting workflow editing and disabling the XML node.
CVE-2026-33696 - n8n Vulnerable to Prototype Pollution in XML & GSuiteAdmin node parameters lead to RCE
Feb 27, 20268mo ago
Akamai reports Zerobot targeting n8n via CVE-2025-68613
Akamai published research stating that Zerobot malware was targeting the n8n automation platform through CVE-2025-68613. The report highlighted active attacker interest in the flaw and reiterated the severe impact of compromise on n8n instances.
Feb 27, 20268mo ago
Public PoC becomes available for CVE-2025-68613
By late February 2026, a public proof-of-concept exploit was available for CVE-2025-68613, lowering the barrier to exploitation of the n8n expression-evaluation RCE flaw. Akamai described the issue as easy to exploit and high impact because it could expose files, environment variables, and integrated services.
Feb 25, 20268mo ago
n8n patches multiple additional vulnerabilities across workflow components
n8n released fixes for several newly disclosed vulnerabilities affecting versions prior to 2.10.1, 2.9.3, and 1.123.22, including expression sandbox escapes, Merge node RCE, JavaScript Task Runner sandbox escape, Form node expression injection, and stored XSS in multiple nodes. The fixes were made available in versions 2.10.1, 2.9.3, and 1.123.22, with guidance to upgrade and apply temporary mitigations if immediate patching was not possible.
Jan 8, 202610mo ago
n8n publishes security advisory for versions 1.65-1.120.4
n8n published a security advisory covering vulnerabilities affecting versions 1.65 through 1.120.4. The advisory represents a separate disclosure from the earlier CVE-2025-68613 sandbox-escape issue and the later February 2026 multi-vulnerability patch release.
Security Advisory: Security Vulnerability in n8n Versions 1.65-1.120.4 - n8n Blog
Dec 15, 202511mo ago
n8n discloses critical RCE flaw CVE-2025-68613
In mid-December 2025, n8n disclosed CVE-2025-68613, a critical remote code execution vulnerability in workflow expression evaluation caused by insufficient sandboxing. The flaw allowed a standard authenticated user to escape the expression sandbox and execute arbitrary code on the n8n server.

Linked entities

Related entities

Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.

Open in app →

Vulnerabilities

1 linked

Authenticated RCE via Expression Injection in n8n (CVE-2025-68613)

Affected products

1 linked

N8n

Organizations

1 linked

N8n

Do you run this?Correlate live exploitation activity against the software you actually run, and see where you're exposed.

See Who's Exploiting This

Source coverage

Sources

11 references tracked. Mallory keeps watching after this page renders.

Cyber Security NewsNews · Mar 30, 2026

Critical n8n Vulnerability Let Attackers Achieve Remote Code ExecutionOpen source ↗

Cvefeed High SeverityAdvisories · Mar 25, 2026

CVE-2026-33660 - n8n Has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL ModeOpen source ↗

Cvefeed High SeverityAdvisories · Mar 25, 2026

CVE-2026-33696 - n8n Vulnerable to Prototype Pollution in XML & GSuiteAdmin node parameters lead to RCEOpen source ↗

AkamaiNews · Feb 27, 2026

Zerobot Malware Targets n8n Automation PlatformOpen source ↗

3 additional sources from 25-02-2026 to 25-02-2026

Cvefeed High SeverityAdvisories · Feb 25, 2026

CVE-2026-27495 - n8n has a Sandbox Escape in its JavaScript Task RunnerOpen source ↗

Cvefeed High SeverityAdvisories · Feb 25, 2026

CVE-2026-27577 - n8n: Expression Sandbox Escape Leads to RCEOpen source ↗

UnclassifiedNews · Jan 8, 2026

Security Advisory: Security Vulnerability in n8n Versions 1.65-1.120.4 - n8n BlogOpen source ↗

UnclassifiedNews · Jan 1, 2026

Geordie AI | n8n Vulnerabilities Explained: Risk Exposure & Remediation | Security AdvisoryOpen source ↗

Mallory platform

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which threat actors are using it right now, and what to deploy next.

Start Free Trial Open in App

Exposure mappingMap indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidenceEvery observed campaign, victim, and pivot linked to actors named in this story.

Associated malwareMalware, exploits, and IOCs connected to the activity described here.

Detection signaturesYARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alertsGet matching new stories delivered to your team as they break, not the next morning.

AI threadsAsk questions about this story and take action on the answers.

← Back to News

internet-facing-service-vulnerabilityproof-of-concept-releasewidely-deployed-product-advisoryrapid-weaponization

Multiple n8n Vulnerabilities Enable RCE, Sandbox Escapes, and Stored XSS

Active Exploitation · 11 sources · Updated 4mo ago · First seen Feb 27, 2026

This is being exploited nowSee which actors are running it and whether you're in range.

Check your exposure

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

7 events · Dec 15, 2025 – Mar 25, 2026

Mar 25, 20267mo ago
n8n fixes CVE-2026-33660 Merge node AlaSQL RCE flaw
n8n fixed CVE-2026-33660, a vulnerability in the Merge node's 'Combine by SQL' mode that let authenticated users with workflow creation or modification rights read local files and potentially achieve remote code execution. The flaw affected versions prior to 2.14.1, 2.13.3, and 1.123.26, and n8n advised immediate upgrades and temporary mitigations such as restricting workflow editing and disabling the Merge node.
CVE-2026-33660 - n8n Has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode
Mar 25, 20267mo ago
n8n fixes CVE-2026-33696 prototype pollution RCE flaw
n8n fixed CVE-2026-33696, a prototype pollution vulnerability in the XML and GSuiteAdmin nodes that could let authenticated users with workflow creation or modification rights achieve remote code execution. The issue affected versions prior to 2.14.1, 2.13.3, and 1.123.27, and n8n advised immediate upgrades plus temporary mitigations such as restricting workflow editing and disabling the XML node.
CVE-2026-33696 - n8n Vulnerable to Prototype Pollution in XML & GSuiteAdmin node parameters lead to RCE
Feb 27, 20268mo ago
Akamai reports Zerobot targeting n8n via CVE-2025-68613
Akamai published research stating that Zerobot malware was targeting the n8n automation platform through CVE-2025-68613. The report highlighted active attacker interest in the flaw and reiterated the severe impact of compromise on n8n instances.
Feb 27, 20268mo ago
Public PoC becomes available for CVE-2025-68613
By late February 2026, a public proof-of-concept exploit was available for CVE-2025-68613, lowering the barrier to exploitation of the n8n expression-evaluation RCE flaw. Akamai described the issue as easy to exploit and high impact because it could expose files, environment variables, and integrated services.
Feb 25, 20268mo ago
n8n patches multiple additional vulnerabilities across workflow components
n8n released fixes for several newly disclosed vulnerabilities affecting versions prior to 2.10.1, 2.9.3, and 1.123.22, including expression sandbox escapes, Merge node RCE, JavaScript Task Runner sandbox escape, Form node expression injection, and stored XSS in multiple nodes. The fixes were made available in versions 2.10.1, 2.9.3, and 1.123.22, with guidance to upgrade and apply temporary mitigations if immediate patching was not possible.
Jan 8, 202610mo ago
n8n publishes security advisory for versions 1.65-1.120.4
n8n published a security advisory covering vulnerabilities affecting versions 1.65 through 1.120.4. The advisory represents a separate disclosure from the earlier CVE-2025-68613 sandbox-escape issue and the later February 2026 multi-vulnerability patch release.
Security Advisory: Security Vulnerability in n8n Versions 1.65-1.120.4 - n8n Blog
Dec 15, 202511mo ago
n8n discloses critical RCE flaw CVE-2025-68613
In mid-December 2025, n8n disclosed CVE-2025-68613, a critical remote code execution vulnerability in workflow expression evaluation caused by insufficient sandboxing. The flaw allowed a standard authenticated user to escape the expression sandbox and execute arbitrary code on the n8n server.

Linked entities