March 11, 2026 · Applied Cybernetics Group
CVE-2025-68613 — n8n n8n
n8n Improper Control of Dynamically-Managed Code Resources Vulnerability
- Added to KEV
2026-03-11- Federal due date
2026-03-25- Vendor
- n8n
- Product
- n8n
- EPSS
- 98.7th percentile (score 0.707, as of
2026-06-08) - NVD CVSS v3.1
- —
- Ransomware use
- Unknown
- Upstream
- https://nvd.nist.gov/vuln/detail/CVE-2025-68613
CISA short description
n8n contains an improper control of dynamically managed code resources vulnerability in its workflow expression evaluation system that allows for remote code execution.
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.