Vulnerability in N8n
CVSS score
8.8
EPSS probability
%99.0
Risk score
17.4
Published
10 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Nuclei: n8n - Remote Code Execution via Expression Injection
Technical analysis of CVE-2025-68613, a critical Expression Injection vulnerability in n8n that allows authenticated attackers to achieve Remote Code Execution (RCE)
Giangdurian/CVE-2026-21858-and-CVE-2025-68613
CVE-2025-68613 — n8n RCE via Expression Injection
Python Exploit for CVE-2025-68613.
CVE-2026-21858 + CVE-2025-68613 — n8n unauthenticated file read to RCE exploit
PoC exploit code for N8N authenticated RCE vulnerability CVE-2025-68613
🛡️ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n "Ni8mare" Unauthenticated Arbitrary File Read & Expression Injection RCE Full Chain).
https://www.akamai.com/blog/security-research/2026/feb/zerobot-malware-targets-n8n-automation-platform
Similar Vulnerabilities
Improper input validation in N8n
Vulnerability in N8n
Code injection in N8n
n8n before 2.34.1 Remote Code Execution via Path Traversal
Code injection in N8n
n8n before 1.123.67 Remote Code Execution via Git node
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-68613"