9.9

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-68613

CVE-2025-68613: n8n Vulnerable to Remote Code Execution via Expression Injection

n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution (RCE) vulnerability in their workflow expression evaluation system. Under certain conditions, expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently isolated from the underlying runtime. An authenticated attacker could abuse this behavior to execute arbitrary code with the privileges of the n8n process. Successful exploitation may lead to full compromise of the affected instance, including unauthorized access to sensitive data, modification of workflows, and execution of system-level operations. This issue has been fixed in versions 1.120.4, 1.121.1, and 1.122.0. Users are strongly advised to upgrade to a patched version, which introduces additional safeguards to restrict expression evaluation. If upgrading is not immediately possible, administrators should consider the following temporary mitigations: Limit workflow creation and editing permissions to fully trusted users only; and/or deploy n8n in a hardened environment with restricted operating system privileges and network access to reduce the impact of potential exploitation. These workarounds do not fully eliminate the risk and should only be used as short-term measures.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-68613

CVE-2025-68613:

9.9

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
n8n	npm	>= 0.211.0, < 1.120.4	1.120.4
n8n	npm	>= 1.121.0, < 1.121.1	1.121.1

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a Remote Code Execution (RCE) in the n8n workflow expression evaluation system. The root cause is insufficient sandboxing of user-provided expressions, which allows an authenticated attacker to execute arbitrary code on the server.

The primary flaw is that function expressions within the evaluated code could gain access to the Node.js global this object. In a Node.js environment, the global this provides access to the process object, which can be abused to execute system commands (e.g., via process.mainModule.require('child_process').execSync(...)).

The analysis of the patches reveals two key areas that were addressed:

Lack of this Context Sanitization: The main expression evaluator, an instance of the Tournament class, was not configured to sanitize the this context of function expressions. The patch introduces a new ASTBeforeHook called FunctionThisSanitizer. This hook traverses the Abstract Syntax Tree (AST) of the user's expression and rewrites all function expressions and calls to explicitly bind their this context to a safe, empty object ({ process: {} }). This prevents the functions from accessing the real process object. The function Tournament.execute is the entry point for this vulnerable evaluation process.
Incomplete Property Blacklist: As a secondary defense mechanism, the isSafeObjectProperty function maintains a blacklist of properties that should not be accessible. The vulnerable version of this function was missing several properties related to Node.js internals (mainModule, binding, _load) that could be leveraged for RCE. The patch adds these to the blacklist, strengthening the sandbox against property-based attacks.

Therefore, the vulnerable functions are Tournament.execute, which performs the unsanitized evaluation, and isSafeObjectProperty, which provided an incomplete security check in the vulnerable versions.

Vulnerable functions

Tournament.execute

packages/workflow/src/expression-evaluator-proxy.ts

This is the core function that evaluates user-provided expressions. In the vulnerable version, it was configured with an empty `before` hook, meaning no sanitization of the `this` context was performed on function expressions within the user's code. This allowed an attacker to craft an expression that creates a function, which then has access to the Node.js global `this` object, including the `process` object, leading to Remote Code Execution. The patch adds the `FunctionThisSanitizer` to the `before` hook to prevent this.

isSafeObjectProperty

packages/workflow/src/utils.ts

This function is part of the expression sandboxing mechanism, specifically used by the `PrototypeSanitizer` to prevent access to dangerous properties of objects. The vulnerable version had an incomplete blacklist of unsafe properties. An attacker could potentially bypass the sandbox by accessing properties like `mainModule`, `binding`, or `_load` on the `process` object to execute arbitrary code. The patch hardens this function by adding these properties to the denylist as a defense-in-depth measure.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.