Case n8n-cve-2025-68613-kevAI supply chainWorldwide
CISA confirms active exploitation of max-severity n8n expression injection RCE
CISA added CVE-2025-68613, a CVSS 9.9 expression-injection flaw in n8n's workflow engine, to its KEV catalog; over 24,700 unpatched instances were exposed, each typically holding cloud keys, OAuth tokens and database passwords.
CriticalAttack on AIStatus: PatchedVerified case file
Open in the interactive mapCite this case
- Reported
- Mar 11, 2026
- Location
- Worldwide
- Target
- Self-hosted n8n AI workflow automation servers
- Severity
- Critical
- Triggered by
- Unknown
- Actor type
- Unknown
- Reported loss
- None reported
- CVE
- CVE-2025-68613
What happened
CISA added CVE-2025-68613, a CVSS 9.9 expression-injection flaw in n8n's workflow engine, to its KEV catalog; over 24,700 unpatched instances were exposed, each typically holding cloud keys, OAuth tokens and database passwords.
Impact: Full takeover of vulnerable instances with access to secrets and the ability to modify workflows; Resecurity estimated over 103,000 of 230,000 active users were vulnerable
Who triggered it
Actor: Unknown
Attribution: CISA confirmed in-the-wild exploitation without naming actors; no public details of the attacks
Motive: Unknown; access to n8n yields stored credentials for connected SaaS, cloud and AI services
How it happened
Attack vector: Authenticated low-privilege user injects payloads into workflow expressions that execute without isolation, gaining code execution as the n8n process
Root cause: Insufficiently sandboxed expression evaluation in n8n versions 0.211.0 through 1.122.0
Timeline
- n8n publishes advisory GHSA-v98v-ff95-f3cp and fixes in 1.120.4, 1.121.1 and 1.122.0
- Shadowserver counts more than 24,700 unpatched instances online
- CISA adds CVE-2025-68613 to KEV with a March 25 federal deadline
Response
Vendor patch available since December 2025; CISA ordered federal agencies to remediate by March 25, 2026
Current status: Patched
Sources (open in a new tab)
- CISA cisa.gov
- n8n advisory GHSA-v98v-ff95-f3cp github.com
- The Register theregister.com
- The Hacker News thehackernews.com
Cite this case
CISA confirms active exploitation of max-severity n8n expression injection RCE. AI Threat Watch, case n8n-cve-2025-68613-kev, Mar 11, 2026. https://aithreat.io/cases/n8n-cve-2025-68613-kev/
Permanent link: https://aithreat.io/cases/n8n-cve-2025-68613-kev/