n8n is an open source workflow automation platform.
CVE-2025-68613 Exploited
n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution (RCE) vulnerability in their workflow expression evaluation system. Under certain conditions, expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently isolated from the underlying runtime. An authenticated attacker could abuse this behavior to execute arbitrary code with the privileges of the n8n process. Successful exploitation may lead to full compromise of the affected instance, including unauthorized access to sensitive data, modification of workflows, and execution of system-level operations. This issue has been fixed in versions 1.120.4, 1.121.1, and 1.122.0. Users are strongly advised to upgrade to a patched version, which introduces additional safeguards to restrict expression evaluation. If upgrading is not immediately possible, administrators should consider the following temporary mitigations: Limit workflow creation and editing permissions to fully trusted users only; and/or deploy n8n in a hardened environment with…
Being exploited in the wild
Catalogued 11 March 2026 · US federal remediation deadline 25 March 2026
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Exploit code is also public: Metasploit · Public PoC · Nuclei template
- Metasploitexploit/multi/http/n8n_workflow_expression_rce
- Nuclein8n - Remote Code Execution via Expression Injection
- Public PoCwioui/n8n-CVE-2025-68613-exploit107 stars
- Public PoCTheStingR/CVE-2025-68613-POC29 stars
- Public PoCrxerium/CVE-2025-6861327 stars
- Public PoCLingerANR/n8n-CVE-2025-686137 stars
- Public PoChackersatyamrastogi/n8n-exploit-CVE-2025-68613-n8n-God-Mode-Ultimate5 stars
- Public PoCmbanyamer/n8n-Authenticated-Expression-Injection-RCE-CVE-2025-686132 stars
- Public PoCJohannesLks/CVE-2025-68613-Python-Exploit1 stars
- Public PoCRianJuniorSf/Analysis-And-POC-N8N-CVE-2025-686131 stars
Part of the AI stack
This affects n8n, in Agent frameworks.
Assessment
- CVSS
- 10 (v3.1)
- Severity
- Critical
- EPSS
- 98.99% chance of exploitation in the next 30 days
- Known exploited
- Yes — listed in the CISA KEV catalog
- Exploit availability
- CISA KEV, Metasploit, Public PoC, Nuclei template
- Published
- 19 December 2025
- Last updated
- 13 October 2026
- Weakness
- CWE-913
- Assigner
- security-advisories@github.com
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
At the source
References
- https://github.com/n8n-io/n8n/commit/08f332015153decdda3c37ad4fcb9f7ba13a7c79
- https://github.com/n8n-io/n8n/commit/1c933358acef527ff61466e53268b41a04be1000
- https://github.com/n8n-io/n8n/commit/39a2d1d60edde89674ca96dcbb3eb076ffff6316
- https://github.com/n8n-io/n8n/security/advisories/GHSA-v98v-ff95-f3cp
- https://www.akamai.com/blog/security-research/2026/feb/zerobot-malware-targets-n8n-automation-platform
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-68613
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Community proofs of concept
No community proof of concept yet. If you have one for a published vulnerability and the right to share it, add it below — it will appear here once reviewed.
Submit a proof of concept
Only for publicly disclosed vulnerabilities, and only material from testing you were authorised to perform. This platform does not buy, sell, or broker exploits — see earning from vulnerability research for legitimate bounty programs. Submissions are reviewed before they appear. Text only; do not include live credentials, personal data, or anything targeting systems you are not permitted to test.
Query this programmatically
Agents can read this through the MCP endpoint, or over HTTP:
curl https://cve.zerocrew.in/api/cve/CVE-2025-68613