Security researchers report a major security vulnerability (CVE-2025-68668) on an open-source workflow automation platform called n8n, which provides authenticated users with the ability to execute arbitrary commands on their host machines.
CVSS rating for the vulnerability is 9.9; it is characterized as a "sandbox bypass" in the Python Code Node with the assistance of Pyodide. The two researchers, Vladimir Tokarev & Ofek Itach, from Cyera Labs uncovered this vulnerability and reported it in n8n. The security flaw affects versions 1.0.0 to 1.999.x of n8n application by allowing authenticated users with creation or modification privileges to execute operating system commands with the same privileges as the n8n process, which can lead to complete compromises of host systems if not remedied.
N8n addressed this flaw starting with version 2.0.0, which defaults the task runner-based version of the Python implementation, while the task runner-based implementation was optional prior to version 1.111.0, providing for greater sandbox isolation.
Steps for Mitigation and Workarounds
While much emphasis has been placed on upgrading to the n8n 2.0.0 version, any administrator would want to consider using these temporary mitigations:
1. Disable Code Node:
NODES_EXCLUDE: ["n8n-nodes-base.code"]
2. Disable Python Code Node Support:
N8N_PYTHON_ENABLED=false
3. Utilize Python in the Task Runner Sandbox:
Set environment variables:
N8N_RUNNERS_ENABLED=true
N8N_NATIVE_PYTHON_RUNNER=true
Cybersecurity Perspective
This Vulnerability Disclosure has been posted at a time soon after n8n has been identified with vulnerability CVE-2025-68613, another arbitrary code execution vulnerability. This vulnerability and this one highlight the severe risk involved when automated workflow systems are able to execute arbitrary code and particularly in those environments where users who are allowed to edit workflows may have this level of access.
Users of n8n are strongly recommended to immediately update all systems, lock down all workflows to prevent users from editing any workflows and review each affected server for any abnormal processes.
Source: The Hacker News
