n8n: any user who can edit a workflow can run code on the server
Identifiers: CVE-2025-68613 · GHSA-v98v-ff95-f3cp · CVSS 3.1 9.9 (scored by GitHub)
What it is
In n8n, an expression placed in a workflow could escape its sandbox and run code on the server. Any logged-in user allowed to create or edit workflows could use it to take the server and every credential n8n stores (API keys, database passwords, OAuth tokens). Disclosed in December 2025; CISA added it to its exploited list in March 2026.
On CISA's Known Exploited Vulnerabilities list since March 11, 2026.
Who is affected
Versions inside these ranges are affected. The fixed versions are the ones to move to.
| Registry | Package | Affected | Move to |
|---|---|---|---|
| npm | n8n | >= 0.211.0, < 1.120.4 >= 1.121.0, < 1.121.1 | 1.120.4, 1.121.1, 1.122.0 |
How to check
Run one of these in your project's folder; the first two download the CLI and check its SHA-256 first:
d="$(mktemp -d)" && a="xsec-$(uname -m | sed s/arm64/aarch64/)-unknown-linux-musl.tar.gz" && curl -fsSL -o "$d/$a" "https://github.com/xtruct-col/xsec-action/releases/latest/download/$a" && curl -fsSL -o "$d/checksums.txt" "https://github.com/xtruct-col/xsec-action/releases/latest/download/checksums.txt" && (cd "$d" && grep " $a$" checksums.txt | sha256sum -c -) && tar -xzf "$d/$a" -C "$d" xsec && "$d/xsec" depsdocker run --rm -v "$PWD:/src" -w /src alpine:3.20 sh -c 'apk add -q curl && d="$(mktemp -d)" && a="xsec-$(uname -m | sed s/arm64/aarch64/)-unknown-linux-musl.tar.gz" && curl -fsSL -o "$d/$a" "https://github.com/xtruct-col/xsec-action/releases/latest/download/$a" && curl -fsSL -o "$d/checksums.txt" "https://github.com/xtruct-col/xsec-action/releases/latest/download/checksums.txt" && (cd "$d" && grep " $a$" checksums.txt | sha256sum -c -) && tar -xzf "$d/$a" -C "$d" xsec && "$d/xsec" deps'xsec depsOr look up n8n in your lockfile and compare the version with the ranges above.
How to fix it
Upgrade n8n to 1.120.4, 1.121.1 or 1.122.0 or later (if you self-host with Docker, update the image tag too). Limit who can edit workflows, and rotate the credentials n8n stores.
Sources
This list is curated by hand and kept short on purpose: it is not every known vulnerability, and a clean xsec deps does not mean no dependency has a flaw. Use your package manager's audit (npm audit, pip-audit, bundle audit) or Dependabot for the rest.