CVE-2025-68613

CVE-2025-68613 — n8n कामप्रवाह स्वचालन अभिव्यक्ति इंजिन पृथक्करण विफलता लेखक इस शोध के दुरुपयोग या क्षति के लिए कोई जिम्मेदारी नहीं लेता है केवल शैक्षिक और रक्षात्मक उद्देश्यों के लिए प्रदान किया गया है विवरण इस रिपॉजिटरी में एक प्रयोगशाला-स्तरीय विश्लेषण और भेद्यता CVE-2025-68613 के लिए एक...

n8n-CVE-2025-68613

Questo repository non contiene un README...

n8n-Authenticated-Expression-Injection-RCE-CVE-2025-68613

n8n Iniezione di Espressioni Autenticata RCE – CVE-2025-68613 Esecuzione Remota di Codice Critica CVSS 9.9 nello strumento di automazione del flusso di lavoro n8n Prova di concetto – Solo per scopi educativi e ricerca sulla sicurezza autorizzata ⚠️ Importante Avvertenza Legale Questo codice è...

CVE-2025-68613_Scanner

n8n CVE-2025-68613 Internet-Scanner Ein auf Tkinter basierendes GUI-Tool, um öffentlich zugängliche n8n -Instanzen über Shodan zu entdecken und auf eine mögliche Gefährdung durch CVE‑2025‑68613 über einen breiten Versionsbereich zu testen. Der Scanner: Fragt Shodan mit mehreren Fingerabdrücken ab...

cve-2025-62726-poc

CVE-2025-62726 POC - n8n Git Node RCE Scopo Educativo Questa è una dimostrazione proof-of-concept per CVE-2025-62726, creata a scopo educativo come parte di un progetto di classe. Parte del corso CMU: 18-739 Hacking & Offensive Security nell'autunno 2025 Panoramica della Vulnerabilità CVE ID:...

n8n-exploit-CVE-2025-68613-n8n-God-Mode-Ultimate

n8n God Mode Ultimate - Scanner & Framework de Exploração CVE-2025-68613 Scanner RCE Avançado de Automação de Workflows n8n e Ferramenta de Exploração 🎯 Visão Geral n8n God Mode Ultimate é um framework abrangente de teste de segurança projetado para detectar e validar o CVE-2025-68613 em...

relatorio-n8n.md

Relatório TryHackMe — n8n: CVE-2025-68613 Vulnerabilidade: CVE-2025-68613 Publicação: 19/12/2025 CVSS: 9.9 Crítico Resumo Relatório da exploração e análise da vulnerabilidade de injeção de expressão no n8n que permite execução remota de código RCE. Documenta ambiente, passos, payloads testados,...

CVE-2025-68613-n8n-rce-analysis

Matrix GIF...

CVE-2026-44789-n8n-PrototypePollution-RCE

CVE-2026-44789 — n8n HTTP Request Node Paginazione Prototype Pollution → RCE Un creatore di flussi di lavoro autenticato n8n 1.123.43 inquina Object.prototype nel processo server di n8n attraverso le impostazioni di paginazione del nodo HTTP Request, poi scala a esecuzione remota di codice abusan...

n8n-RCE

n8n RCE CORRETTO Esecuzione di codice da remoto tramite flussi di lavoro n8n Basato su CVE-2025-68613 ⚠️ Realizzato solo a scopo educativo 📚 Installazione e Utilizzo 🛠️ root@kitploit: $ git clone https://github.com/AbdulRKB/n8n-RCE.git $ cd n8n-RCE $ pip install -r requirements.txt $ python...

ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit, and More

A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do. Signed drivers get turned against defenses. Legitimate apps help malware blend in. A weak header check opens a path to code execution. Elsewhere, exposed systems, old bugs, odd hiding tricks, and...

CVE-2026-77085

n8n before 2.34.1 and 2.33.x before 2.33.4 contains an SSRF protection bypass in the SearXNG Agent tool. The tool sent requests to the user-supplied API URL using a raw HTTP client that did not route through n8n's centralized SSRF protection. On instances with N8NSSRFPROTECTIONENABLED=true, an...

CVE-2026-77082

n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contains a regular expression denial of service ReDoS vulnerability in the Filter and Switch nodes, which compile user-supplied regex patterns with new RegExp and execute them synchronously on the worker thread without complexity...

CVE-2026-77083

n8n is a workflow automation platform. In versions prior to 1.123.69, 2.33.4, and 2.34.1, the JavaScript Code node's VM sandbox did not freeze the sandbox's Function.prototype, allowing an authenticated user with the ability to create and execute workflows to pollute it from within a Code node...

CVE-2026-77079

n8n before 2.34.1 and 2.33.4 contains an authorization bypass in the custom project role deletion reassignment path. When deleting a custom project role with a reassignment target, the code validated only that the target role existed and was project-scoped, performing no project-level authorizati...

CVE-2026-77080

n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contain an arbitrary file read and write vulnerability in the Snowflake node, which passes free-form Execute Query input, including client-side commands, directly to the Snowflake SDK without applying n8n's file-access restrictions...

CVE-2026-77077

n8n versions before 1.123.69, 2.33.4, and 2.34.1 contain a JavaScript task runner VM sandbox escape. The runner's prototype-freezing routine covers globalThis functions but not internal module constructors such as EventEmitter, allowing an authenticated user with Code node access to exploit...

CVE-2026-77081

n8n before 1.123.69, 2.x before 2.33.4, and 2.x before 2.34.1 contain an allowed-domains bypass in the GraphQL node. When the node's Authentication parameter is set to expression mode, every authentication-gated credential selector is treated as active; if two credentials of different types are...

CVE-2026-77084

n8n before 1.123.69 and 2.x before 2.33.4 / 2.34.1 contains a code execution vulnerability in the Git node. The Git node executed certain repository-local git configuration values without neutralizing them, so any subsequent Git node operation against a repository containing a malicious value wou...

CVE-2026-77073

n8n versions before 2.34.1 contain a credential validation bypass in the MCP createworkflowfromcode tool when authentication type is set to an expression. Attackers with a valid MCP Bearer API key and knowledge of a target credential ID can persist unauthorized cross-project credential references...