CVE-2025-68613

Producto

n8n / n8n

Vulnerabilidad

n8n Improper Control of Dynamically-Managed Code Resources Vulnerability

Añadido a KEV

11 mar 2026

Remediar antes de

25 mar 2026

Uso conocido en ransomware

No

Descripción resumida

n8n contains an improper control of dynamically managed code resources vulnerability in its workflow expression evaluation system that allows for remote code execution.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://github.com/n8n-io/n8n/security/advisories/GHSA-v98v-ff95-f3cp ; https://nvd.nist.gov/vuln/detail/CVE-2025-68613