IT Consultancy
IT Consultancy Get expert guidance to leverage technology for your business growth. We help you identify the right IT solutions, optimize infrastructure, and ensure your digital environment is secure,…
Critical n8n Flaw (CVSS 9.9) Allows Arbitrary Code Execution
Digital Marketing
Digital Marketing Grow your brand and reach the right audience with data-driven marketing strategies. We help you create campaigns that convert, manage social channels effectively, and optimize your d…
Privacy Policy
Privacy Policy At CometSoul, accessible from https://cometsoul.com, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collec…
Terms and Conditions
Welcome to CometSoul! These terms and conditions outline the rules and regulations for the use of CometSoul’s Website, located at https://cometsoul.com. By accessing this website we assume you a…
Disclaimer
If you require any more information or have any questions about our site’s disclaimer, please feel free to contact us. Disclaimers for CometSoul All the information on this website – https…
Managed Wi-Fi Service
Managed Wi-Fi Service Build a fast, stable, and secure Wi-Fi for your business at Zero depreciation cost. Enterprise-Grade Guest Wi-Fi With $0 Upfront Hardware Costs. We provide, install, and support …
Smart Business System Integrator
Smart Business System Integrator Simplify your daily operations with smart systems that automate bookings, schedules, and routine tasks so you can focus on growing your business. We set up and integra…
A critical security vulnerability has been discovered in the n8n workflow automation platform. If exploited, this flaw could allow arbitrary code execution on affected systems.
The vulnerability is tracked as CVE-2025-68613 and has a CVSS score of 9.9, indicating a very high severity. It was reported by security researcher Fatih Çelik. n8n is widely used, with around 57,000 weekly downloads.
The issue occurs when expressions provided by authenticated users during workflow configuration are evaluated in an execution environment that is not fully isolated. This behavior can be abused to run malicious code.
A successful attack allows an attacker to execute code with the privileges of the n8n process. This may lead to full system compromise, including unauthorized access to sensitive data, workflow manipulation, and execution of system-level commands.
The vulnerability affects all n8n versions from 0.211.0 up to but not including 1.120.4. The issue has been fixed in versions 1.120.4, 1.121.1, and 1.122.0.
According to Censys data as of December 22, 2025, there are more than 103,000 potentially exposed n8n instances worldwide. Most of them are located in the United States, Germany, France, Brazil, and Singapore.
Users are strongly advised to update immediately. If patching is not possible, limit workflow creation and editing permissions to trusted users only. Running n8n in a hardened environment with restricted OS privileges and network access can also help reduce risk.
Source: https://thehackernews.com/2025/12/critical-n8n-flaw-cvss-99-enables.html