CVE-2025-68697

n8n is an open source workflow automation platform. Prior to version 2.0.0, in self-hosted n8n instances where the Code node runs in legacy (non-task-runner) JavaScript execution mode, authenticated users with workflow editing access can invoke internal helper functions from within the Code node. This allows a workflow editor to perform actions on the n8n host with the same privileges as the n8n process, including: reading files from the host filesystem (subject to any file-access restrictions configured on the instance and OS/container permissions), and writing files to the host filesystem (subject to the same restrictions). This issue has been patched in version 2.0.0. Workarounds for this issue involve limiting file operations by setting N8N_RESTRICT_FILE_ACCESS_TO to a dedicated directory (e.g., ~/.n8n-files) and ensure it contains no sensitive data, keeping N8N_BLOCK_FILE_ACCESS_TO_N8N_FILES=true (default) to block access to .n8n and user-defined config files, and disabling high-risk nodes (including the Code node) using NODES_EXCLUDE if workflow editors are not fully trusted.

• CWE-269
• CWE-749

• https://github.com/n8n-io/n8n/security/advisories/GHSA-j4p8-h8mh-rh8qPatch, Vendor Advisory

Published

Dec 26, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-68691Rejected reason: Not used
• CVE-2025-68692Rejected reason: Not used
• CVE-2025-68693Rejected reason: Not used
• CVE-2025-68694Rejected reason: Not used
• CVE-2025-68695Rejected reason: Not used
• CVE-2025-68696httparty is an API tool. In versions 0.23.2 and prior, httpa…8.2
• CVE-2025-68698Jervis is a library for Job DSL plugin scripts and shared Je…7.5
• CVE-2025-68699NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging …6.5
• CVE-2025-6870A vulnerability was found in SourceCodester Simple Company W…4.7
• CVE-2025-68700RAGFlow is an open-source RAG (Retrieval-Augmented Generatio…8.8
• CVE-2025-68701Jervis is a library for Job DSL plugin scripts and shared Je…7.5
• CVE-2025-68702Jervis is a library for Job DSL plugin scripts and shared Je…7.5