CVE-2025-68613—n8n Improper Control of Dynamically-Managed Code Resources Vulnerability

漏洞名称

n8n Improper Control of Dynamically-Managed Code Resources Vulnerability

描述

n8n contains an improper control of dynamically managed code resources vulnerability in its workflow expression evaluation system that allows for remote code execution.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

其他说明

• https://github.com/n8n-io/n8n/security/advisories/GHSA-v98v-ff95-f3cp
• https://nvd.nist.gov/vuln/detail/CVE-2025-68613

相关新闻文章

• Leaked n8n API Tokens Exposed Live Instances to Credential TheftAugust 5, 2026
• Chinese hacker used DeepSeek to launch autonomous cyberattacks on vulnerable serversAugust 3, 2026
• Hacker uses DeepSeek AI to autonomously attack vulnerable serversJuly 31, 2026
• Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous AttacksJuly 31, 2026
• Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli OrganizationsJuly 6, 2026

相关 CWE

• CWE-913