Critical n8n Automation Platform Vulnerability Enables RCE Attacks – 103,000+ Instances Exposed

A critical authenticated remote code execution vulnerability (CVE-2025-68613, CVSS 9.9) was disclosed in the n8n workflow automation platform, affecting versions from 0.211.0 up to (but not including) 1.120.4, 1.121.1, and 1.122.0; patches are available in releases 1.120.4, 1.121.1, and 1.122.0. The flaw allows arbitrary code execution with full process privileges via unsafe workflow expression evaluation, potentially enabling full system compromise; a proof-of-concept has been published and Censys identifies approximately 103,476 potentially vulnerable instances, so immediate patching and permission hardening are recommended.