New Critical n8n Vulnerability Allow Attackers to Execute Arbitrary Commands

Cybersecuritynews •Abinaya • January 6, 2026

A critical vulnerability has been discovered in n8n, the popular open-source workflow automation platform, enabling authenticated attackers to execute arbitrary commands on host systems. The vulnerability, tracked as CVE-2025-68668, has been assigned a severe CVSS score of 9.9 out of 10, underscoring its high severity. The security weakness stems from a sandbox-bypass issue in n8n’s Python […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical n8n Vulnerability Allows Command Execution by Authenticated Users A critical vulnerability in n8n, an open-source workflow automation platform, has been identified, allowing authenticated attackers to execute arbitrary commands on host systems. This vulnerability, tracked as CVE-2025-68668, has a CVSS score of 9.9 out of 10, indicating its severe impact. The issue is related to a sandbox-bypass flaw in n8n's Python environment. 3 sources 46

Extracted Entities

New Critical n8n Vulnerability Allow Attackers to Execute Arbitrary Commands

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)