n8n Hit by CVSS 10.0 Flaw Granting Server Control

Popular workflow automation tool n8n is under scrutiny after security researchers uncovered a critical remote code execution vulnerability rated the maximum 10.0 on the CVSS scale. The platform, widely adopted for automating business processes, was hit by the flaw, which allows attackers to gain full control of affected servers. Tracked as CVE-2025-68613, the exploit can potentially grant unauthorized access to sensitive systems.

In addition to CVE-2025-68613, two other related vulnerabilities—CVE-2025-65964 and the older CVE-2018-1038—raise further concerns around the software’s underlying security. The n8n development team has issued an alert and is urging users to patch the affected systems immediately to prevent exploitation.

Security analysts warn that the ease of executing this attack significantly increases its threat level for organizations relying on n8n. As the platform continues to grow in popularity, the discovery of such a severe vulnerability underscores the importance of timely updates.

Read the full report at

n8n Under Fire: Critical CVSS 10.0 RCE Vulnerability Grants Total Server Access