{"action":"Upgrade n8n to 1.120.4 or later.","affected":[{"fixed":"1.120.4","introduced":"0.211.0"},{"fixed":"1.121.1","introduced":"1.121.0"}],"component":"n8n","cve_ids":["CVE-2025-68613"],"ecosystem":"npm","epss":0.98994,"exploited":true,"fixed_versions":["1.120.4","1.121.1"],"ghsa_id":"GHSA-v98v-ff95-f3cp","id":"tcs_01M5KGBCNETCKEB157RFNNTBZA","modified_at":"2026-03-13T10:47:45.159705Z","published_at":"2025-12-22T16:19:13Z","references":["https://osv.dev/vulnerability/GHSA-v98v-ff95-f3cp","https://github.com/n8n-io/n8n/security/advisories/GHSA-v98v-ff95-f3cp","https://nvd.nist.gov/vuln/detail/CVE-2025-68613","https://github.com/n8n-io/n8n/commit/08f332015153decdda3c37ad4fcb9f7ba13a7c79","https://github.com/n8n-io/n8n/commit/1c933358acef527ff61466e53268b41a04be1000","https://github.com/n8n-io/n8n/commit/39a2d1d60edde89674ca96dcbb3eb076ffff6316","https://github.com/n8n-io/n8n","https://www.akamai.com/blog/security-research/2026/feb/zerobot-malware-targets-n8n-automation-platform","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-68613"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"GHSA-v98v-ff95-f3cp","url":"https://osv.dev/vulnerability/GHSA-v98v-ff95-f3cp"},{"source":"kev","source_id":"CVE-2025-68613","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}],"summary":"n8n Vulnerable to Remote Code Execution via Expression Injection"}