CVE-2025-68668

CVE-2025-68668 affects n8n 1.x (1.0.0 up to

CVE-2025-68668 n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node

n8n is an open source workflow automation platform. From version 1.0.0 to before 2.0.0, a sandbox bypass vulnerability exists in the Python Code Node that uses Pyodide. An authenticated user with permission to create or modify workflows can exploit this vulnerability to execute arbitrary commands...

@0xlimao/n8n-nodes-ethereum (0.1.1), @adhiraj2486/n8n-nodes-vigorus (1.0.8) +771 more potentially affected by CVE-2025-68668 via n8n-workflow (>=1.0.0, <=1.120.28)

n8n-workflow NPM version =1.0.0, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =0.2.0, =0.5.2, =1.0.1, =0.1.0, =0.1.5, =1.0.0, =0.1.1, =0.1.4 and more Source cves: CVE-2025-68668 Source advisory: SNYK:JS-N8NWORKFLOW-14723277...