CVE-2025-68613

CVE-2025-68613 n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution RCE vulnerability in their workflow expression evaluation system. Under certain conditions, expressions supplied by...

CVE-2026-126391

n8n before 1.123.89 contains an insufficient isolation vulnerability in workflow expression evaluation that allows authenticated users to escape the sandbox. Attackers with permission to create or modify workflows can craft expressions referencing unexpected JavaScript properties to execute...

CVE-2026-1731

CVE-2026-1731 BeyondTrust Remote Support Pre-Auth RCE PoC !WARNING This script is intended for educational and research purposes only. Do not use it against systems without explicit permission. Unauthorized access or testing is illegal and unethical. Read the full DISCLAIMER before using this...

CVE-2026-126391

The software n8n versions prior to 1.123.89 is vulnerable to a Remote Code Execution (RCE) flaw due to insufficient isolation in the workflow expression evaluation sandbox. Authenticated users with permissions to create or modify workflows can craft expressions that reference unexpected JavaScrip...

EUVD-2026-125174

n8n before 1.123.89 contains an insufficient isolation vulnerability in workflow expression evaluation that allows authenticated users to escape the sandbox. Attackers with permission to create or modify workflows can craft expressions referencing unexpected JavaScript properties to execute...

CVE-2026-126391 n8n before 1.123.89 RCE via Workflow Expression Evaluation Sandbox Escape

n8n before 1.123.89 contains an insufficient isolation vulnerability in workflow expression evaluation that allows authenticated users to escape the sandbox. Attackers with permission to create or modify workflows can craft expressions referencing unexpected JavaScript properties to execute...

CVE-2024-54152

⚙️🔨 IN PROGRESS CVE-2024-54152 POC Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex undisclose...

n8n - Remote Code Execution via Expression Injection

n8n 1.120.4, 1.121.1, 1.122.0 contains a remote code execution caused by insufficient isolation in workflow expression evaluation, letting authenticated attackers execute arbitrary code with n8n process privileges. Exploit requires authentication. id: CVE-2025-68613 info: name: n8n - Remote Code...

n8n-CVE-2025-68613-exploit

n8n - CVE-2025-68613: Improper Control of Dynamically-Managed Code Resources Vulnerability n8n contains a critical Arbitrary Code Execution vulnerability in its workflow expression evaluation system. Under certain conditions, expressions supplied by authenticated users during workflow configurati...

n8n-RCE-CVE-2025-68613

n8n CVE-2025-68613 Overview This repository contains an educational security research project focused on CVE-2025-68613 , a vulnerability affecting specific versions of n8n related to unsafe workflow expression evaluation. The project was tested only in a controlled local lab environment. About...

CVE-2025-68613

CVE-2025-68613 n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution RCE vulnerability in their workflow expression evaluation system. Under certain conditions, expressions supplied by...

CVE-2026-95664

CVE-2026-95664 — camel-aws2-s3: a header-supplied object key was evaluated as a Simple expression Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the camel-aws2-s3 producer took the object key from the CamelAwsS3Key message header and — since 4.8.0 —...

CVE-2026-41729

CVE-2026-41729: Spring Data REST JSON Patch Map Key SpEL Injection PoC This repository is a minimal reproduction PoC for CVE-2026-41729, as disclosed in the official Spring security advisory. Official advisory: https://spring.io/security/cve-2026-41729/ Official title: Spring Data REST SpEL...

CVE-2026-120567

The MongoDB Entity Framework Core provider contains a vulnerability where it fails to neutralize special elements in caller-supplied values during bulk updates expressed as database results. Because the provider does not properly sanitize these values, input supplied as plain data can be misinter...

ExecuteUpdate may evaluate caller-supplied values as MongoDB expressions

The MongoDB Entity Framework Core provider does not neutralize special elements when it places a caller-supplied value into a bulk update that is expressed as a databasea result, a value supplied as plain data may be interpreted by the database as expression syntax. A part value through normal...

SUSE CVE-2026-110449

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled...

DEBIAN-CVE-2026-110449

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled...

CVE-2026-110449

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled...

CVE-2026-110449: Integer Overflow or Wraparound

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled...

GeoServer-CVE-2024-36401

GeoServer-CVE-2024-36401 GeoServer CVE-2024-36401: Remote Code Execution RCE Vulnerability In Evaluating Property Name Expressions GetPropertyValue POST /geoserver/wfs HTTP/1.1 Host: PunitDarji Content-Type: application/xml User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36...