n8n expression flaw CVE-2025-68613 used by Zerobot; original and follow-up fixes available
Attackers used an n8n workflow-expression flaw to run code on automation servers. Businesses and family offices running n8n should install a current supported release: later expression escapes required further updates beyond the original fix.
If your business or family office runs n8n, ask its administrator to install a current supported release; fixes covering these expression flaws were published in 1.123.22, 2.9.3 and 2.10.1. Until updated, restrict workflow creation and editing to fully trusted users, but treat this only as a temporary precaution.
What’s happening
n8n connects services and automates tasks. CVE-2025-68613 lets a logged-in attacker abuse workflow expressions to run code with the server application's permissions, potentially exposing sensitive data and changing workflows. n8n disclosed it on 19 December 2025. The original vendor page has contradictory version fields: its written guidance names 1.122.0 as fixed, while GitHub's reviewed entry also lists fixes in 1.120.4 and 1.121.1. Further expression escapes received separate identifiers and fixes in February: CVE-2026-25049 and CVE-2026-27577. The latter fixes are 1.123.22, 2.9.3 and 2.10.1. Akamai reported Zerobot attacks against the original flaw observed during January; CISA confirmed exploitation through its 11 March listing. As of 3 November, fixes are available, but the sources reviewed do not establish that attacks have ended or provide a confirmed victim total. Exploitation of the two follow-up flaws is not established by these sources.
- What
- Flaw
- Affects
- n8n workflow automation server
- Affected
- CVE-2025-68613: n8n from 0.211.0 before the original 1.122.0 fix; GitHub's reviewed entry narrows this to >=0.211.0, <1.120.4 and >=1.121.0, <1.121.1. The original vendor page's version fields conflict with its written fix guidance.
CVE-2026-25049: n8n 1.x before 1.123.17 and 2.x before 2.5.2.
CVE-2026-27577: n8n <1.123.22; >=2.0.0, <2.9.3; and >=2.10.0, <2.10.1. - Fixed in
- CVE-2025-68613: n8n 1.122.0 according to the vendor's written guidance; GitHub's reviewed entry also lists 1.120.4 and 1.121.1.
CVE-2026-25049: n8n 1.123.17 and 2.5.2.
CVE-2026-27577: n8n 1.123.22, 2.9.3 and 2.10.1. - Since
- 11 Mar 2026
- Closed
- 11 Mar 2026
Timeline
- CISA added
CISA added CVE-2025-68613 to its Known Exploited Vulnerabilities catalogue. US federal civilian agencies were required to remediate it by 25 March.
- Wider attacks
Akamai reported Zerobot malware exploiting CVE-2025-68613. Its researchers had observed the activity in their monitoring systems during January 2026, after the original fix was available.
- New fixFixed
n8n disclosed another expression sandbox escape, CVE-2026-27577, following the original vulnerability. It named fixes in 1.123.22, 2.9.3 and 2.10.1.
- New fixFixed
n8n disclosed further expression escapes under CVE-2026-25049. Versions 1.123.17 and 2.5.2 fixed these additional routes to running commands on the server.
- Made publicFixed
n8n disclosed CVE-2025-68613, which lets a logged-in attacker run code through workflow expressions. Its advisory named version 1.122.0 as the fix.
Sources
- n8n Remote Code Execution via Expression Injectionn8n · 19 Dec 2025
- Expression Escape Vulnerability Leading to RCEn8n · 4 Feb 2026
- Expression Sandbox Escape Leading to RCEn8n · 25 Feb 2026
- n8n Vulnerable to Remote Code Execution via Expression InjectionGitHub Advisory Database · 11 Mar 2026
- Zerobot Malware Targets n8n Automation PlatformAkamai · 27 Feb 2026
- CISA orders feds to patch n8n RCE flaw exploited in attacksBleepingComputer · 11 Mar 2026
- CISA Flags Actively Exploited n8n RCE Bug as 24,700 Instances Remain ExposedThe Hacker News · 12 Mar 2026