Exploit for Improper Control of Dynamically-Managed Code Resources in N8N

CVE-2025-68613

githubexploit · 2026-06-21

Description

An exploit for improper control of dynamically managed code resources in N8N.

Entry point

Parameternodes[1].parameters.values.string[0].value · request body

Pathrest/workflows

Malicious expression payload injected in the Set node within a created workflow (expression evaluated at runtime in n8n), enabling RCE

Affected n8n versions

n8n< 1.120.4, 1.121.0

All known vulnerabilities by product

N8N

CVSS 9.9 for CVE-2025-68613

9.9

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

100%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

97.9%higher than 99.9% of all CVEs

Updated 2026-08-08

Exploit Details

Modified:2026-06-21 21:58

Last Seen:2026-06-21 22:07

Reporter:azilRababe

Last commit:2026-06-21

Other exploits for CVE-2025-68613

CVE-2026-21858-and-CVE-2025-68613

2026-07-31 GiangdurianGITHUB

Exploit for Improper Input Validation in N8N

2026-07-21 qianlijaingshanGITHUB

Exploit for Improper Input Validation in N8N

2026-06-21 FomovetGITHUB

Exploit for Improper Control of Dynamically-Managed Code Resources in N8N

2026-04-14 canpilaydaGITHUB

Exploit for Improper Input Validation in N8N

2026-04-09 kaleth4GITHUB

Exploit for Deserialization of Untrusted Data in Facebook React

2026-03-13 namoussa2GITHUB

Exploit for Improper Control of Dynamically-Managed Code Resources in N8N

2026-03-03 h3raklezGITHUB

Exploit for Improper Input Validation in N8N

2026-02-24 bamov970GITHUB

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=9884B1E8-28B5-5EF2-85C0-874B02C19650
No description provided

Exploit Code

Share

Share on social media: