Two critical-severity n8n vulnerabilities could have led to unauthenticated remote code execution, sandbox escape, and credential theft.
Two critical n8n flaws (CVSS 9.4, 9.5) enable RCE via expression sandbox escape and public forms, risking credential exposure.
The critical vulnerability affecting both cloud and self-hosted n8n instances requires no authentication or even n8n account ...
CISA adds n8n RCE flaw CVE-2025-68613 to KEV after active exploitation; 24,700 exposed instances raise compromise risk.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results