{"data":{"id":"9bd28e9b-d9b9-4588-a414-8f0974f77f94","title":"CVE-2025-68613: n8n Improper Control of Dynamically-Managed Code Resources Vulnerability","summary":"CVE-2025-68613 is an improper control of dynamically managed code resources vulnerability in n8n's workflow expression evaluation system. It allows remote code execution, and the source notes it is actively exploited in the wild (CISA KEV).","solution":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Due date: 2026-03-25.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-68613","publishedAt":"2026-03-11T00:00:00.000Z","cveId":"CVE-2025-68613","cweIds":["CWE-913"],"cvssScore":null,"cvssSeverity":null,"severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["n8n@>= 0.211.0, < 1.120.4 (fixed: 1.120.4)","n8n@>= 1.121.0, < 1.121.1 (fixed: 1.121.1)"],"affectedPackageNames":["n8n"],"affectedPackageRefs":["npm:n8n"],"affectedVendors":[],"affectedVendorsRaw":["n8n"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"active","epssScore":0.98994,"epssCheckedAt":"2026-11-04T12:08:34.493Z","kevDateAdded":"2026-03-11","advisoryAliases":["GHSA-v98v-ff95-f3cp"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:50:31.219Z","patchAvailable":true,"disclosureDate":"2026-03-11T00:00:00.000Z","fixReleasedAt":"2025-11-19T12:26:06.588Z","daysToFix":-112,"fixCheckedAt":"2026-10-29T21:39:58.559Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"n8n","fixedVersion":"1.121.1","matchedVersion":"1.121.1","fixReleasedAt":"2025-11-19T12:36:49.454Z","daysToFix":-112,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:39:58.403Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"1.120.4","matchedVersion":"1.120.4","fixReleasedAt":"2025-11-19T12:26:06.588Z","daysToFix":-112,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:39:58.403Z"}]}}