CVE-2025-65964-Exploit

Reproduction Steps First, prepare a repository containing a malicious file. mkdir n8n-rce-poc && cd n8n-rce-poc git init git remote add origin mkdir evilhooks echo '!/bin/sh' evilhooks/pre-commit echo 'touch /tmp/pwnedsuccess' evilhooks/pre-commit chmod +x evilhooks/pre-commit git add...

CVE-2026-21858

CVE-2026-21858 + CVE-2025-68613 - n8n Full Chain Unauthenticated Arbitrary File Read → Admin Token Forge → Sandbox Bypass → RCE | ---|--- CVE| CVE-2026-21858 AFR + CVE-2025-68613 RCE CVSS| 10.0 + 9.9 Critical Affected| = 0.211.0 RCE Fixed| 1.121.0 AFR / 1.120.4+ RCE Disclosed| 2026-01-07 11:09 UT...

CVE-2026-21858-n8n-FullChain

🛡️ AI Security Tool Module n8n Full Chain CVE-2026-21858 + CVE-2025-68613 — "Ni8mare" Official Security Audit Module for AI Security Tool Ecosystem 🌐 Web Demo • 📚 Project Website • 💬 Community Chat Website Navigation: Home • Updates • Downloads • Modules 🧠 Conceptual Overview This module provides...

PoC-CVE-2026-21858

PoC-CVE-2026-21858 n8n is an open source workflow automation platform. Versions starting with 1.65.0 and below 1.121.0 enable an attacker to access files on the underlying server through execution of certain form-based workflows. A vulnerable workflow could grant access to an unauthenticated remo...

POC-CVE-2025-68613

Description PoC exploit code for N8N authenticated RCE vulnerability CVE-2025-68613 Usage python3 poc.py -u -c...

CVE-2025-68613

🚀 n8n Authenticated RCE PoC Pocsuite3 CVE ID : CVE-2025-68613 Type : Authenticated Remote Code Execution Framework : Pocsuite3 This is a vulnerability verification and exploitation script based on the Pocsuite3 framework, used to detect the authenticated remote code execution RCE vulnerability in...

CVE-2026-65591

CVE-2026-65591 Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.64 n8n versions prior to 2.29.8 n8n versions prior to 2.30.1 Description A sanitizer bypass exists in the legacy expression evaluator's computed-member handler. An authenticated user with permissions ...

CVE-2026-25049

🚨 CVE-2026-25049 – n8n Unauthenticated Settings Disclosure 📌 Overview CVE ID: CVE-2026-25049 Affected Software: n8n Severity: Critical Category: Improper Access Control / Information Disclosure This vulnerability allows unauthenticated access to internal configuration data via a REST API endpoint...

Analysis-And-POC-N8N-CVE-2025-68613

Overview n8n and CVE-2025-68613 n8n is a workflow automation platform used to integrate systems and services through visual flows and JavaScript expressions. CVE-2025-68613 is a critical Remote Code Execution RCE vulnerability, with CVSS 9.9 , affecting multiple versions of n8n. The flaw occurs i...

CVE-2025-68613

CVE-2025-68613 — n8n RCE via Expression Injection For educational and authorized security research purposes only. Overview Critical RCE vulnerability CVSS 9.9 in n8n workflow automation platform. Authenticated users can execute arbitrary OS commands via the executeCommand node, bypassing sandbox...

n8n_CVE-2025-68613_exploit_payloads

n8nCVE-2025-68613exploitpayloads Expression injection payloads for n8n CVE-2025-68613 RCE LEGAL DISCLAIMER: This content is for educational purposes only. Author bears no responsibility for damages, misuse, or unauthorized exploitation of CVE-2025-68613. Test solely in isolated lab environments o...

Ni8mare

🔒 Ni8mare Scanner Ethical Security Scanner for CVE-2026-21858 Ni8mare Vulnerability "Knowledge is power, but only if shared responsibly." Comprehensive vulnerability detection tool for n8n workflow automation instances. Detects the critical CVE-2026-21858 vulnerability CVSS 10.0 without performin...

CVE-2025-68613-poc-via-copilot

✅ CVE-2025-68613 n8n Expression Injection RCE Vulnerability Complete Analysis Date : December 23, 2024 Status : ✅ RCE Fully Verified CVSS Score : 10.0 Critical 🎉 Successful RCE Payload function var require = this.process.mainModule.require; var execSync = require'childprocess'; return execSync'id...

n8n-cve-2025-68613

CVE-2025-68613 – n8n Expression Injection RCE Toolkit ini menyediakan scanner dan exploit PoC untuk kerentanan kritis CVE-2025-68613 pada n8n Workflow Automation Platform. This repository provides scanner and exploit PoC scripts for the critical CVE-2025-68613 vulnerability affecting n8n Workflow...

n8n-RCE-CVE-2025-68613

n8n Expression Injection RCE Analysis CVE-2025-68613 This repo contains the lab report I prepared for exploiting the vulnerable n8n service available on the Hackviser platform. In the study, I demonstrated how I performed a sandbox escape by using the expression evaluation mechanism on n8n and...

n8n-CVE-2025-68613

This repository does not have a README...

n8n-CVE-2025-68613-TryHackMe

TryHackMe Room: n8n: CVE-2025-68613 Player: J4ck3LSyN Host: ... Username: [email protected] Password: Try12345! Methodology Payload: function return this.process.mainModule.require'childprocess'.execSync'cat flag.txt'.toString Payload 2: function return...

n8n-cve-2025-68613-thm

CVE-2025-68613 – n8n Critical RCE Exploitation Overview This repository documents a hands-on exploitation of CVE-2025-68613 CVSS 9.9 , a critical Remote Code Execution vulnerability affecting the n8n workflow automation platform versions 0.211.0 through 1.120.3. This exploitation was performed...

Exploit-CVE-2025-68613

Exploit-CVE-2025-68613 Security Advisory: Critical Remote Code Execution Vulnerability in n8n CVE-2025-68613 A critical vulnerability has been identified in the n8n workflow automation tool that allows for arbitrary code execution. Authenticated users with permissions to create or edit workflows...

Blackash-CVE-2025-68613

🚨 CVE-2025-68613 — Critical RCE in n8n Severity: 🔴 Critical Impact: Remote Code Execution Affected Platform: n8n workflow automation 🧩 Overview CVE-2025-68613 is a critical security vulnerability in n8n , an open-source workflow automation platform. The issue allows an authenticated attacker to...