Exploit for Improper Control of Dynamically-Managed Code Resources in N8N

githubexploit · 2026-09-05

Description

Authenticated RCE in N8N CVE-2025-68613 via improper control of dynamic code resources.

Affected n8n versions

n8n< 1.120.4, 1.121.0

All known vulnerabilities by product

CVSS 9.9 for CVE-2025-68613

9.9

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

100%confidence this exploit runs

Based on 2 file(s) in the source

Exploit Details

Modified:2026-09-05 20:01

Last Seen:2026-09-05 21:23

Reporter:rmhowe425

Tags

N8NRemote Code ExecutionAuthenticatedDynamic CodeCVE-2025-68613

Other exploits for CVE-2025-68613

POC-CVE-2025-68613

2026-09-05 KitPloitKITPLOIT

n8n-CVE-2025-68613-exploit

2026-09-05 KitPloitKITPLOIT

n8n-exploit-CVE-2025-68613-n8n-God-Mode-Ultimate

2026-09-05 KitPloitKITPLOIT

CVE-2025-68613-POC

2026-09-05 KitPloitKITPLOIT

n8n-CVE-2025-68613

2026-09-05 KitPloitKITPLOIT

2026-09-05 KitPloitKITPLOIT

CVE-2026-21858-and-CVE-2025-68613

2026-09-05 KitPloitKITPLOIT

n8n-cve-2026-21858

2026-09-05 KitPloitKITPLOIT

Exploit Code

README6 lines

## https://sploitus.com/exploit?id=AB2C3D43-3C56-5430-87F0-2DEB963C31AB
## Description
PoC exploit code for N8N authenticated RCE vulnerability CVE-2025-68613

## Usage
`python3 poc.py -u  -c `