CVE-2025-68668

creationtimestamp| type| source ---|---|--- 2025-12-26 22:27:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mawdnbjwfd2c 2025-12-27 01:37:14+00:00| seen| https://infosec.exchange/users/offseq/statuses/115788967584243205 2025-12-27 01:37:17+00:00| seen|...

CVE-2025-68668

CVE-2025-68668 affects n8n 1.x (1.0.0 up to

CVE-2025-68668 n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node

n8n is an open source workflow automation platform. From version 1.0.0 to before 2.0.0, a sandbox bypass vulnerability exists in the Python Code Node that uses Pyodide. An authenticated user with permission to create or modify workflows can exploit this vulnerability to execute arbitrary commands...

@0xlimao/n8n-nodes-ethereum (=0.1.1), @adhiraj2486/n8n-nodes-vigorus (=1.0.8) +745 more potentially affected by CVE-2025-68668 via n8n-workflow (>=1.0.0 <=2.0.0-rc.0)

n8n-workflow NPM version =1.0.0, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =0.2.0, =0.5.2, =1.0.1, =0.1.5, =1.0.0, =0.1.1, =0.1.4 - @arwinho/n8n-nodes-oxxa =0.1.0 and more Source cves: CVE-2025-68668 Source advisory: SNYK:JS-N8NWORKFLOW-14723277...