Find notable cyber news and cases, enriched with sources, timelines, and signals.

N8n security patch for CVE-2025-68613

Security Patch Release
First reported
Last updated
Happening score
H score 73
1 unique sources, 1 articles

Summary

Hide ▲

n8n released fixes for CVE-2025-68613, a critical flaw in its workflow automation platform that could allow arbitrary code execution. The update covers versions >= 0.211.0 and < 1.120.4, with fixes shipped in 1.120.4, 1.121.1, and 1.122.0. Users are urged to apply the updates as soon as possible; if patching is delayed, restricting workflow creation and editing to trusted users and hardening the runtime can reduce risk.

Related Happenings

Fortinet security patch release for CVE-2026-39813

Security Patch Release
H score41 First: 16.06.2026 12:19 Last: 16.06.2026 12:19 Sources 1

About this happening: Fortinet released April 14 security updates for FortiSandbox, covering CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089. The patch release fixes three...

SimpleHelp security update for CVE-2026-48558

Security Patch Release
H score65 First: 15.06.2026 23:06 Last: 15.06.2026 23:06 Sources 1

About this happening: SimpleHelp released 5.5.16 and 6.0 RC2 on June 9 to fix CVE-2026-48558, a critical OIDC authentication flaw in SimpleHelp remote management software th...

Langflow security patch release for CVE-2026-5027

Security Patch Release
H score38 First: 11.06.2026 00:23 Last: 11.06.2026 00:23 Sources 1

About this happening: Langflow shipped fixes for CVE-2026-5027, closing a path traversal flaw that let attackers write arbitrary files on exposed servers. The patch landed in langflow-bas...

Veeam security patch release for CVE-2026-44963

Security Patch Release
H score79 First: 09.06.2026 17:27 Last: 09.06.2026 17:27 Sources 1

About this happening: Veeam released security updates for Veeam Backup & Replication to fix CVE-2026-44963, a critical flaw that could enable remote code execution on domain-joined ba...

Cisco Secure Workload REST API patch release (CVE-2026-20223)

Security Patch Release
H score55 First: 22.05.2026 08:36 Last: 22.05.2026 08:36 Sources 1

About this happening: Cisco patched CVE-2026-20223, a CVSS 10.0 Secure Workload REST API flaw that could expose sensitive data and allow configuration changes across tenant boundaries. The upda...

Timeline

  1. 23.12.2025 09:34 2 articles · 6mo ago

    n8n releases fixes for CVE-2025-68613

    Mitigation Patch Update

    n8n disclosed CVE-2025-68613, a critical vulnerability in the workflow automation platform that could let an authenticated attacker execute arbitrary code with the privileges of the n8n process when workflow configuration expressions are evaluated in an insufficiently isolated execution context. The affected range covers versions >= 0.211.0 and < 1.120.4, and fixes were released in 1.120.4, 1.121.1, and 1.122.0 to reduce the risk of full compromise, unauthorized access to sensitive data, workflow modification, and system-level operations.

    Show sources