Critical n8n Vulnerability Lets Attackers Execute Allow Arbitrary

A Critical n8n Vulnerability has been identified in n8n, the widely used open-source workflow automation platform. This flaw allows authenticated attackers to Execute Allow Arbitrary commands on host systems.

The vulnerability, tracked as CVE-2025-68668, has been assigned a severe CVSS score of 9.9 out of 10, underscoring its high severity.​

The security weakness stems from a sandbox-bypass issue in n8n’s Python Code Node, which uses Pyodide for code execution.

This flaw allows authenticated users with workflow-creation or modification permissions to bypass the intended security sandbox.

Execute arbitrary commands directly on the host system running n8n, using the same privileges as the n8n process.​

The vulnerability affects all n8n versions from 1.0.0 through 1.111.0, exposing a wide range of deployments to potential compromise.

The attack is low-complexity and requires no user interaction, requiring only network access and low-level authentication privileges.​

Exploiting CVE-2025-68668 can lead to complete system compromise, as attackers can execute commands with n8n process privileges.

The vulnerability’s “Changed” scope classification indicates that the impact extends beyond the vulnerable component itself and may affect resources outside n8n’s security scope.​

The weakness is categorized as CWE-693 (Protection Mechanism Failure), indicating that n8n’s security controls did not provide adequate defense against directed attacks targeting the Python execution environment.​

n8n has addressed this critical vulnerability in version 2.0.0 by implementing a task-runner-based native Python execution model that provides enhanced isolation.

Organizations running affected versions should immediately upgrade to version 2.0.0 or later.​ According to n8n advisories posted on GitHub, organizations unable to upgrade immediately can mitigate risk by applying temporary workarounds.

Disable the Code Node entirely by setting the NODES_EXCLUDE environment variable to exclude n8n-nodes-base.code. Disable Python support by setting the environment variable N8N_PYTHON_ENABLED=false (available from version 1.104.0).

Use a sandboxed Python execution model by enabling the task runner–based Python sandbox through the N8N_RUNNERS_ENABLED and N8N_NATIVE_PYTHON_RUNNER environment variables.

Disclaimer: HackersRadar reports on cybersecurity threats and incidents for informational and awareness purposes only. We do not engage in hacking activities, data exfiltration, or the hosting or distribution of stolen or leaked information. All content is based on publicly available sources.