New n8n Vulnerability (9.9 CVSS) Lets Authenticated Users Execute System Commands

A new critical security vulnerability in the open-source workflow platform n8n could allow an authenticated attacker to execute arbitrary system commands on the host running n8n, with the flaw tracked as CVE-2025-68668 and a CVSS score of 9.9. It affects n8n versions from 1.0.0 up to, but not including, 2.0.0, and an authenticated user who can create or modify workflows can exploit it to run OS commands with the same privileges as the n8n process, with the issue addressed in version 2.0.0.

“A sandbox bypass vulnerability exists in the Python Code Node that uses Pyodide,” an advisory states, and an authenticated user with workflow permissions can exploit this to execute arbitrary commands on the host.

N8n had introduced a task runner-based native Python sandbox in version 1.111.0 as an optional security measure, which became the default with the 2.0.0 release, and workarounds include disabling the Code Node or Python support and enabling the task runner-based Python sandbox via specific environment variables, according to GHSA-62r4-hw23-cc8v. The article also notes a previous critical n8n flaw (CVE-2025-68613) with a 9.9 CVSS score that could allow arbitrary code execution under certain conditions.