{"id":"n8n-expression-code-execution-attacks-mar-2026","category":"patch","status":"closed","title":"n8n expression flaw CVE-2025-68613 used by Zerobot; original and follow-up fixes available","tldr":"Attackers used an n8n workflow-expression flaw to run code on automation servers. Businesses and family offices running n8n should install a current supported release: later expression escapes required further updates beyond the original fix.","summary":"n8n connects services and automates tasks. CVE-2025-68613 lets a logged-in attacker abuse workflow expressions to run code with the server application's permissions, potentially exposing sensitive data and changing workflows. n8n disclosed it on 19 December 2025. The original vendor page has contradictory version fields: its written guidance names 1.122.0 as fixed, while GitHub's reviewed entry also lists fixes in 1.120.4 and 1.121.1. Further expression escapes received separate identifiers and fixes in February: CVE-2026-25049 and CVE-2026-27577. The latter fixes are 1.123.22, 2.9.3 and 2.10.1. Akamai reported Zerobot attacks against the original flaw observed during January; CISA confirmed exploitation through its 11 March listing. As of 3 November, fixes are available, but the sources reviewed do not establish that attacks have ended or provide a confirmed victim total. Exploitation of the two follow-up flaws is not established by these sources.","action":"If your business or family office runs n8n, ask its administrator to install a current supported release; fixes covering these expression flaws were published in 1.123.22, 2.9.3 and 2.10.1. Until updated, restrict workflow creation and editing to fully trusted users, but treat this only as a temporary precaution.","product":"n8n workflow automation server","audience":"work","severity":"critical","patch":"patched","exploited":true,"cves":["CVE-2025-68613","CVE-2026-25049","CVE-2026-27577"],"tags":["n8n","workflow-automation","remote-code-execution","actively-exploited","zerobot"],"affected":["CVE-2025-68613: n8n from 0.211.0 before the original 1.122.0 fix; GitHub's reviewed entry narrows this to >=0.211.0, <1.120.4 and >=1.121.0, <1.121.1. The original vendor page's version fields conflict with its written fix guidance.","CVE-2026-25049: n8n 1.x before 1.123.17 and 2.x before 2.5.2.","CVE-2026-27577: n8n <1.123.22; >=2.0.0, <2.9.3; and >=2.10.0, <2.10.1."],"fixed":["CVE-2025-68613: n8n 1.122.0 according to the vendor's written guidance; GitHub's reviewed entry also lists 1.120.4 and 1.121.1.","CVE-2026-25049: n8n 1.123.17 and 2.5.2.","CVE-2026-27577: n8n 1.123.22, 2.9.3 and 2.10.1."],"matches":[],"sources":[{"kind":"advisory","title":"n8n Remote Code Execution via Expression Injection","url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-v98v-ff95-f3cp","by":"n8n","date":"2025-12-19"},{"kind":"advisory","title":"Expression Escape Vulnerability Leading to RCE","url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-6cqr-8cfr-67f8","by":"n8n","date":"2026-02-04"},{"kind":"advisory","title":"Expression Sandbox Escape Leading to RCE","url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-vpcf-gvg4-6qwr","by":"n8n","date":"2026-02-25"},{"kind":"advisory","title":"n8n Vulnerable to Remote Code Execution via Expression Injection","url":"https://github.com/advisories/GHSA-v98v-ff95-f3cp","by":"GitHub Advisory Database","date":"2026-03-11"},{"kind":"research","title":"Zerobot Malware Targets n8n Automation Platform","url":"https://www.akamai.com/blog/security-research/2026/feb/zerobot-malware-targets-n8n-automation-platform","by":"Akamai","date":"2026-02-27"},{"kind":"news","title":"CISA orders feds to patch n8n RCE flaw exploited in attacks","url":"https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-n8n-rce-flaw-exploited-in-attacks/","by":"BleepingComputer","date":"2026-03-11"},{"kind":"news","title":"CISA Flags Actively Exploited n8n RCE Bug as 24,700 Instances Remain Exposed","url":"https://thehackernews.com/2026/03/cisa-flags-actively-exploited-n8n-rce.html","by":"The Hacker News","date":"2026-03-12"}],"started":"2026-03-11","closed":"2026-03-11","created":"2026-11-03T22:23:53.813Z","updated":"2026-11-03T22:23:53.813Z","cve_notes":[{"cve":"CVE-2025-68613","name":"Code execution through n8n workflow expressions","what":"Insufficient isolation of n8n's workflow expressions lets a logged-in attacker run code with the n8n process's permissions, potentially accessing data and altering workflows.","severity":"critical","cvss":9.9},{"cve":"CVE-2026-25049","name":"Further n8n expression escapes fixed in February","what":"Additional escapes in n8n's expression evaluation let a logged-in user with workflow creation or editing permission run commands on the host, requiring fixes beyond those for CVE-2025-68613.","severity":"critical","cvss":9.4},{"cve":"CVE-2026-27577","name":"n8n expression sandbox escape in later releases","what":"A further n8n expression sandbox escape lets a logged-in workflow creator or editor run commands on the host, affecting releases before 1.123.22, 2.9.3 and 2.10.1 in their respective branches.","severity":"critical","cvss":9.4}],"timeline":[{"at":"2026-03-11","added":"2026-11-03T22:11:23.504Z","kind":"cisa-added","text":"CISA added CVE-2025-68613 to its Known Exploited Vulnerabilities catalogue. US federal civilian agencies were required to remediate it by 25 March.","url":"https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-n8n-rce-flaw-exploited-in-attacks/","by":"BleepingComputer","patch":null},{"at":"2026-02-27","added":"2026-11-03T22:11:23.504Z","kind":"wider-attacks","text":"Akamai reported Zerobot malware exploiting CVE-2025-68613. Its researchers had observed the activity in their monitoring systems during January 2026, after the original fix was available.","url":"https://www.akamai.com/blog/security-research/2026/feb/zerobot-malware-targets-n8n-automation-platform","by":"Akamai","patch":null},{"at":"2026-02-25","added":"2026-11-03T22:11:23.504Z","kind":"new-fix","text":"n8n disclosed another expression sandbox escape, CVE-2026-27577, following the original vulnerability. It named fixes in 1.123.22, 2.9.3 and 2.10.1.","url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-vpcf-gvg4-6qwr","by":"n8n","patch":"patched"},{"at":"2026-02-04","added":"2026-11-03T22:11:23.504Z","kind":"new-fix","text":"n8n disclosed further expression escapes under CVE-2026-25049. Versions 1.123.17 and 2.5.2 fixed these additional routes to running commands on the server.","url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-6cqr-8cfr-67f8","by":"n8n","patch":"patched"},{"at":"2025-12-19","added":"2026-11-03T22:11:23.504Z","kind":"disclosed","text":"n8n disclosed CVE-2025-68613, which lets a logged-in attacker run code through workflow expressions. Its advisory named version 1.122.0 as the fix.","url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-v98v-ff95-f3cp","by":"n8n","patch":"patched"}],"url":"https://hard.fyi/live/n8n-expression-code-execution-attacks-mar-2026/","json":"https://hard.fyi/api/live?id=n8n-expression-code-execution-attacks-mar-2026"}