n8n security advisory (AV25-857) – Update 1

Serial number: AV25-857
Date: December 22, 2025
Updated: March 11, 2026

On December 19, 2025, n8n published a security update to address a critical vulnerability in the following product:

  • n8n workflow automation – versions 0.211.0 to versions prior to 1.120.4

Update 1

On March 11, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-68613 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary update.

Date modified: