Thehackernews
Critical n8n Vulnerability Allows Command Execution by Authenticated Users
First seen 6 Jan 2026, 16:41 UTC
•
•46.0
Export
Article Content
Browse articles
A critical vulnerability in n8n, an open-source workflow automation platform, has been identified, allowing authenticated attackers to execute arbitrary commands on host systems. This vulnerability, tracked as CVE-2025-68668, has a CVSS score of 9.9 out of 10, indicating its severe impact. The issue is related to a sandbox-bypass flaw in n8n's Python environment.
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
More articles in this cluster
Continue Reading
Critical n8n Vulnerability Enables Arbitrary Command Execution
Critical RCE Vulnerability in n8n Affects Over 100K Servers
Critical n8n RCE Vulnerability Exploit Code Released
Iranian APT Groups Target Israeli Organizations with Modular C2 Frameworks
Critical RCE Vulnerability in Marimo Exploited Within 10 Hours of Disclosure
Langflow IDOR Exploit and Critical Vulnerabilities Targeting AI Platforms