Tuesday, August 11, 2026
LIVEThe Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///The Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///
Subscribe
Cyber Security
Independent · Digital
Thehackingpost
RSSSubscribe
CybersecurityAI-assisted

New n8n Vulnerability Allows Attackers to Execute Arbitrary Commands

A critical vulnerability has been identified in n8n, an open-source automation and workflow platform, that could enable authenticated users to execute arbitrary commands on affected systems.

WBy William HayesJan 06, 20261 min read

A critical vulnerability has been identified in n8n, an open-source automation and workflow platform, that could enable authenticated users to execute arbitrary commands on affected systems.

The vulnerability, designated as CVE-2025-68668 , impacts all n8n versions from 1.0.0 to 1.999.999 and has a CVSS score of 9.1, indicating a critical risk level.

CVE ID: CVE-2025-68668 Vulnerability Type: Sandbox Bypass / Arbitrary Command Execution Affected Component: Python Code Node (Pyodide) Severity: Critical CVSS v3.1 Score: 9.1/10

The issue resides in n8n’s Python Code Node, which utilizes Pyodide for sandbox execution. Researchers reported that this sandbox protection can be bypassed by authenticated users with permissions to create or modify workflows. Exploiting this flaw allows attackers to execute arbitrary system commands with the same privileges as the n8n process on the host machine.

Researchers reported that this sandbox protection can be bypassed by authenticated users with permissions to create or modify workflows.
William Hayes · Thehackingpost

The vulnerability requires minimal privileges and low attack complexity, making it accessible for malicious insiders or users with basic workflow access. It affects the confidentiality, integrity, and availability of systems, potentially resulting in data theft, system compromise, or service disruption.

The vulnerability impacts n8n versions 1.0.0 through 1.999.999. n8n has released version 2.0.0, which offers a complete fix by replacing the vulnerable Pyodide-based implementation with a more secure task-runner-based native Python environment. Users on versions 1.104.0 or later can apply temporary workarounds without upgrading.

Disable the Code Node entirely by setting the environment variable NODES_EXCLUDE to exclude n8n-nodes-base.code. Turn off Python support by setting N8N_PYTHON_ENABLED=false , available since version 1.104.0. Enable a task-runner-based Python sandbox via N8N_RUNNERS_ENABLED and N8N_NATIVE_PYTHON_RUNNER environment variables for better isolation.

Advertisement

Organizations using n8n should prioritize upgrading to version 2.0.0 immediately. If immediate upgrades are not feasible, implement one of the workarounds based on operational requirements.

Based on reporting by GBHackers.

AI transparency. This article was produced with the assistance of artificial intelligence and published under human editorial oversight. AI systems can make mistakes. Read how we use AI (EU AI Act, Art. 50).
Related Stories
Cybersecurity

Why Fintech Banking Platforms Are Reducing Operational Costs by 40%

Paige Monroe · Mar 26, 2026
Cybersecurity

Dogecoin Price Prediction: SHIB Burns 172M Tokens as Pepeto Exchange Earns From Every Trade

Eric Wallace · Mar 26, 2026
Cybersecurity

Solana Price Prediction: SOL Holds $86 With Commodity Status as Pepeto Targets Bigger Returns

Zachary Burns · Mar 26, 2026
Cybersecurity

Open Directory Malware Campaign Uses Obfuscated VBS, PNG Loaders and RAT Payloads

Joseph Cain · Mar 26, 2026