CVE-2025-68613 is a critical-severity vulnerability, listed in the CISA KEV catalog. AttackerView checks n8n sites for it with a live exploit check.
Detects n8n instances running versions 0.211.0 through 1.120.3 or 1.121.0 where the workflow expression evaluation engine allows authenticated users to escape the sandbox and execute arbitrary OS commands via prototype chain access to the Node.js process object.
Is your app exploitable through CVE-2025-68613?
Scan your domain free