n8n Under Fire: Critical CVSS 10.0 RCE Vulnerability Grants Total Server Access

n8n has issued a critical security alert for CVE-2025-68613, a Remote Code Execution flaw rated CVSS 10.0 that could grant an attacker total server access. The flaw lies in the workflow expression evaluation system, where authenticated users’ expressions can be evaluated in a context not sufficiently isolated from the underlying runtime, effectively leaking control to the attacker.

According to the advisory, exploitation can lead to a full compromise of the affected instance, with potential data theft, modification of workflows and a takeover of the server. The maintainers have released a fix in n8n v1.122.0 and urge users to upgrade immediately to gain additional safeguards to restrict expression evaluation.

For those unable to take the platform offline, two temporary workarounds are suggested: restrict access by limiting workflow creation and editing to fully trusted users, and harden the environment by running n8n in a locked-down setup with restricted OS privileges and limited network access.