Dashboard / CVE-2025-68613

CVE-2025-68613

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 10/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

n8n contains an improper control of dynamically managed code resources vulnerability in its workflow expression evaluation system that allows for remote code execution.

CISA Known Exploited Vulnerability

Vendor / Product n8n — n8n
Date Added 2026-03-11
Remediation Due 2026-03-25
https://github.com/n8n-io/n8n/security/advisories/GHSA-v98v-ff95-f3cp ; https://nvd.nist.gov/vuln/detail/CVE-2025-68613

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
n8n n8n 0.211.0 – 1.120.4
n8n n8n 1.121.0

References & Advisories (6)

Bug Bounty Relevance

10 / 100
✓ Known exploited (KEV)
✓ High exploitation probability

CVSS Score

Unscored

EPSS — Exploitation Probability

98.99%
Raw Score 0.989940
Percentile 99.9%
Date 2026-10-28

Intelligence Sources

kev ref →

External Links