New n8n Vulnerability (9.9 CVSS) Lets Authenticated Users Execute System Commands

Certains articles de veille peuvent faire l'objet de traduction automatique.

A new critical security vulnerability has been disclosed in n8n, an open-source workflow automation platform, that could enable an authenticated attacker to execute arbitrary system commands on the underlying host.
The vulnerability, tracked as CVE-2025-68668, is rated 9.9 on the CVSS scoring system. It has been described as a case of a protection mechanism failure.
It affects n8n versions from

Source : https://thehackernews.com/2026/01/new-n8n-vulnerability-99-cvss-lets.html