N8n N8n 需授权 命令注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://cloud.tencent.com/developer/article/2612747
• https://github.com/secjoker/CVE-2025-68613
• https://github.com/n8n-io/n8n/security/advisories/GHSA-v98v-ff95-f3cp
• https://blog.securelayer7.net/cve-2025-68613-n8n-rce-exploitation/
• https://www.gm7.org/archives/21686
• https://zone.ci/secarticles/wx/480715.html
• https://nvd.nist.gov/vuln/detail/CVE-2025-68613
• https://medium.com/@asadullah547335/critical-remote-code-execution-in-n8n-cve-2025-68613-df1fbde512bc
• https://www.secrss.com/articles/86325

Related Vulnerabilities

• N8n N8n 需授权 表达式注入漏洞
• PoCCVE-2026-21877: n8n >= 0.123.0 and < 1.121.3 - Remote Code Execution
• N8n N8n 需授权 代码注入漏洞
• PoCCVE-2026-21858: n8n Webhooks - Remote Code Execution
• PoCCVE-2025-68613: n8n - Remote Code Execution via Expression Injection
• N8n N8n 设计缺陷漏洞 可导致沙箱逃逸
• N8n N8n 外部资源引用不当漏洞
• N8n 需授权 外部资源引用不当漏洞 可导致代码执行
• PoCn8n-config: N8n - Config