CVE-2026-25049
Additional escapes in n8n's expression evaluation let a logged-in user with workflow creation or editing permission run commands on the host, requiring fixes beyond those for CVE-2025-68613.
If your business or family office runs n8n, ask its administrator to install a current supported release; fixes covering these expression flaws were published in 1.123.22, 2.9.3 and 2.10.1. Until updated, restrict workflow creation and editing to fully trusted users, but treat this only as a temporary precaution.
- Affects
- n8n workflow automation server
- Severity
- Critical · CVSS 9.4
- Fixed in
- CVE-2025-68613: n8n 1.122.0 according to the vendor's written guidance; GitHub's reviewed entry also lists 1.120.4 and 1.121.1.
CVE-2026-25049: n8n 1.123.17 and 2.5.2.
CVE-2026-27577: n8n 1.123.22, 2.9.3 and 2.10.1. - Being used in attacks
- Not known to be
- Made public
- 11 Mar 2026
Part of: n8n expression flaw CVE-2025-68613 used by Zerobot; original and follow-up fixes available
n8n connects services and automates tasks. CVE-2025-68613 lets a logged-in attacker abuse workflow expressions to run code with the server application's permissions, potentially exposing sensitive data and changing workflows. n8n disclosed it on 19 December 2025. The original vendor page has contradictory version fields: its written guidance names 1.122.0 as fixed, while GitHub's reviewed entry also lists fixes in 1.120.4 and 1.121.1. Further expression escapes received separate identifiers and fixes in February: CVE-2026-25049 and CVE-2026-27577. The latter fixes are 1.123.22, 2.9.3 and 2.10.1. Akamai reported Zerobot attacks against the original flaw observed during January; CISA confirmed exploitation through its 11 March listing. As of 3 November, fixes are available, but the sources reviewed do not establish that attacks have ended or provide a confirmed victim total. Exploitation of the two follow-up flaws is not established by these sources.
Fixed in the same update
- CVE-2025-68613Code execution through n8n workflow expressions
- CVE-2026-27577n8n expression sandbox escape in later releases
Sources
- n8n Remote Code Execution via Expression Injectionn8n · 19 Dec 2025
- Expression Escape Vulnerability Leading to RCEn8n · 4 Feb 2026
- Expression Sandbox Escape Leading to RCEn8n · 25 Feb 2026
- n8n Vulnerable to Remote Code Execution via Expression InjectionGitHub Advisory Database · 11 Mar 2026
- Zerobot Malware Targets n8n Automation PlatformAkamai · 27 Feb 2026
- CISA orders feds to patch n8n RCE flaw exploited in attacksBleepingComputer · 11 Mar 2026
- CISA Flags Actively Exploited n8n RCE Bug as 24,700 Instances Remain ExposedThe Hacker News · 12 Mar 2026