CVE-2025-68613 N8n-Io N8n
n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution (RCE) vulnerability in their workflow expression evaluation system. Under certain…
- CVSS
- 10.0 Critical
- EPSS
- 99%
- Percentile
- 100
- Published
- 2025-12-19
- Force
- 11 of 12
- Public PoC
- 36
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
On CISA’s exploited list
n8n Improper Control of Dynamically-Managed Code Resources Vulnerability
- Added
- 2026-03-11
- Federal patch deadline
- 2026-03-25
- Ransomware use
- not known