n8n Improper Control of Dynamically-Managed Code Resources Vulnerability — CVE-2025-68613

Summary

Advisory CVE-2025-68613. n8n Improper Control of Dynamically-Managed Code Resources Vulnerability Vendor: n8n. Source: CISA-KEV. Threat: high. Known exploited in the wild. See the official advisory for details.

What to do

General, cautious steps (verify details in the official source):

• Prioritize patching or mitigation immediately (treat as actively risky).
• Identify affected product versions in your inventory and verify whether you are impacted.
• Apply vendor patches/updates or recommended mitigations as soon as available.
• Check logs/telemetry for indicators of compromise and suspicious activity.
• Consider temporary hardening: restrict access, reduce attack surface, and monitor aggressively.
• Read the official advisory for exact affected versions and remediation steps.

Official advisory

Read the official source

Related advisories

• Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability CVE-2026-1603
• Omnissa Workspace ONE Server-Side Request Forgery CVE-2021-22054
• SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability CVE-2025-26399
• Apple iOS and iPadOS Use-After-Free Vulnerability CVE-2023-41974
• Apple Multiple Products Integer Overflow or Wraparound Vulnerability CVE-2021-30952
• Apple Multiple products Use-After-Free Vulnerability CVE-2023-43000
• Hikvision Multiple Products Improper Authentication Vulnerability CVE-2017-7921
• Rockwell Multiple Products Insufficient Protected Credentials Vulnerability CVE-2021-22681
• Broadcom VMware Aria Operations Command Injection Vulnerability CVE-2026-22719
• Qualcomm Multiple Chipsets Memory Corruption Vulnerability CVE-2026-21385
• Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability CVE-2026-20127
• Cisco SD-WAN Path Traversal Vulnerability CVE-2022-20775