n8n-RCE-CVE-2025-68613

n8n CVE-2025-68613 Overview This repository contains an educational security research project focused on CVE-2025-68613 , a vulnerability affecting specific versions of n8n related to unsafe workflow expression evaluation. The project was tested only in a controlled local lab environment. About...

EUVD-2026-74625

The Eventin – Event Calendar, Event Registration, Tickets & Booking AI Powered plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.1.17. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it...

gha-lab-ee08e207a8

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of gradio-app/gradio at commit...

Jenkins Pipeline Groovy Plugin <=2.63 - Insecure Deserialization

Jenkins Pipeline: Groovy Plugin workflow-cps version 2.63 and earlier contains a sandbox bypass vulnerability in CpsGroovyShell.java. During parsing, compilation, and script instantiation of CPS-transformed pipeline scripts, sandbox protections are not applied, allowing authenticated users with...

CVE-2025-68613

CVE-2025-68613 n8n 是一款开源的工作流自动化平台。自 0.211.0 版本起至 1.120.4、1.121.1 和 1.122.0 之前的版本，其工作流表达式评估系统中存在一个严重的远程代码执行（RCE）漏洞。在某些条件下，由认证用户在工作流配置期间提供的表达式可能会在未充分与底层运行时隔离的执行上下文中被评估。经过身份验证的攻击者可利用此行为，以 n8n 进程的权限执行任意代码。成功利用该漏洞可能导致受影响实例被完全控制，包括未经授权访问敏感数据、修改工作流以及执行系统级操作。此问题已在 1.120.4、1.121.1 和 1.122.0...

Kibana 9.3.x < 9.4.3 Privilege Escalation (ESA-2026-61)

The version of Kibana installed on the remote host is 9.3.x prior to 9.4.3. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-61 advisory. - Incorrect Authorization CWE-863 in Kibana can lead to privilege escalation via Exploiting Incorrectly Configured Access Control...

CVE-2026-71807

RuoYi-Cloud-Plus versions up to 2.6.2 are affected in the ruoyi-workflow module. The root cause is that multiple core task APIs in FlwTaskController lack permission annotations, and the Service layer does not verify whether the current user is the task handler or related user. Authenticated low-p...

CVE-2026-53637

Sylius is an Open Source eCommerce Framework on Symfony. Versions 2.0.0 through 2.0.17, 2.1.0 through 2.1.14, and 2.2.0 through 2.2.5 contain an improper workflow enforcement vulnerability in the cart FormComponent. When an order is completed while its cart page remains open, the stale...

CVE-2025-68613

CVE-2025-68613 — n8n Workflow Automation Expression Engine Isolation Failure The author assumes no liability for misuse or damage caused by this research Provided strictly for educational and defensive purposes Description This repository contains a laboratory-grade analysis and a safe...

CVE-2025-68613

🚀 PoC de RCE autenticado en n8n Pocsuite3 ID de CVE : CVE-2025-68613 Tipo : Ejecución remota de código autenticada Framework : Pocsuite3 Este es un script de verificación y explotación de vulnerabilidades basado en el framework Pocsuite3 , utilizado para detectar la vulnerabilidad de ejecución...

CVE-2026-53637

CVE-2026-53637 is an improper workflow enforcement vulnerability in Sylius (an open-source eCommerce framework on Symfony). The affected component is the cart FormComponent , a Symfony UX LiveComponent. When an order is completed while the cart page remains open, the stale component fails to dete...

CVE-2026-53637 Sylius: Cart FormComponent allows modification or deletion of an already-completed order

Sylius is an Open Source eCommerce Framework on Symfony. Versions 2.0.0 through 2.0.17, 2.1.0 through 2.1.14, and 2.2.0 through 2.2.5 contain an improper workflow enforcement vulnerability in the cart FormComponent. When an order is completed while its cart page remains open, the stale...

CVE-2026-53637 Sylius: Cart FormComponent allows modification or deletion of an already-completed order

Sylius is an Open Source eCommerce Framework on Symfony. Versions 2.0.0 through 2.0.17, 2.1.0 through 2.1.14, and 2.2.0 through 2.2.5 contain an improper workflow enforcement vulnerability in the cart FormComponent. When an order is completed while its cart page remains open, the stale...

CVE-2026-86996

n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the workflow setting named This workflow can be called by was enforced by the Execute Workflow node but not when a workflow was attached to an Agent as a tool. A user able to build an Agent could invoke a restricted...

CVE-2026-86994

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the /rest/active-workflows endpoint returned every active workflow ID on the instance to any member regardless of sharing. Workflow activation, deactivation, and publication push events were also broadcast ...

CVE-2026-86078

n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the Instance AI workflow summary used node names and connection keys from stored workflows as ordinary object keys. A workflow submitted through the REST API could contain proto or constructor, causing nested writes t...

GHSA-7HGX-277F-7VMG n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy

Impact A workflow's "This workflow can be called by" setting was enforced by the Execute Workflow node but was not consulted when the same workflow was attached to an Agent as a tool. A user who could build an Agent could therefore call a workflow that its owner had restricted, and read back what...

n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy

Impact A workflow's "This workflow can be called by" setting was enforced by the Execute Workflow node but was not consulted when the same workflow was attached to an Agent as a tool. A user who could build an Agent could therefore call a workflow that its owner had restricted, and read back what...

NPM: n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy

NPM: n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy vulnerability discovered by ? in WordPress Npm n8n versions 2.37.7...

CVE-2026-86078 n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service

n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the Instance AI workflow summary used node names and connection keys from stored workflows as ordinary object keys. A workflow submitted through the REST API could contain proto or constructor, causing nested writes t...