{"vulnerability": "cve-2025-68668", "sightings": [{"uuid": "d09e382d-8665-447d-89b9-f43be8e55f45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68668", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mawdnbjwfd2c", "content": "", "creation_timestamp": "2025-12-26T22:27:36.887313Z"}, {"uuid": "bf52d9e6-f2aa-4415-a3ed-977ceb19c711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-68668", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/115788967584243205", "content": "", "creation_timestamp": "2025-12-27T01:37:14.268086Z"}, {"uuid": "797198b9-0589-4aaa-94dc-ada28893796f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-68668", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mawoae3fbr2l", "content": "", "creation_timestamp": "2025-12-27T01:37:17.357463Z"}, {"uuid": "fb3f6018-37da-422f-a5c2-456e64edaea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68668", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mb5zvms5sk2r", "content": "", "creation_timestamp": "2025-12-29T23:54:39.268162Z"}, {"uuid": "1458bcc7-88d6-457c-a68d-ce90dcc3aa4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-68668", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/116165340674775673", "content": "", "creation_timestamp": "2026-03-03T12:53:51.941588Z"}, {"uuid": "3bde8eb0-c2c1-41cd-a0d3-c946d1dba143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68668", "type": "seen", "source": "https://bsky.app/profile/cybersentinel404.bsky.social/post/3mbq6u6gsiu23", "content": "", "creation_timestamp": "2026-01-06T05:11:13.162636Z"}, {"uuid": "9a58f7ec-b0eb-4df1-a402-3e00f294d586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68668", "type": "seen", "source": "https://thehackernews.com/2026/01/new-n8n-vulnerability-99-cvss-lets.html", "content": "", "creation_timestamp": "2026-01-06T04:08:00.000000Z"}, {"uuid": "cfae69b4-bec1-4621-8267-bcbe66f22873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68668", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mbqqtdwkqx2d", "content": "", "creation_timestamp": "2026-01-06T10:32:52.420769Z"}, {"uuid": "9a33602f-bf55-42d5-b732-056a0b962206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68668", "type": "seen", "source": "https://bsky.app/profile/allsafeus.bsky.social/post/3mbqrwzpt7u2l", "content": "", "creation_timestamp": "2026-01-06T10:52:50.434374Z"}, {"uuid": "da198bbc-538d-4fd1-a90a-16a2061c4c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68668", "type": "seen", "source": "https://infosec.exchange/users/technadu/statuses/115848536559135953", "content": "", "creation_timestamp": "2026-01-06T14:06:24.276181Z"}, {"uuid": "7e52a404-c375-4629-b623-f7c9347964b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68668", "type": "seen", "source": "https://bsky.app/profile/technadu.com/post/3mbr4tbwqz22h", "content": "", "creation_timestamp": "2026-01-06T14:07:57.064890Z"}, {"uuid": "0cc7fa7d-fd2d-4ae8-9e26-3c49de8cfae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68668", "type": "seen", "source": "https://bsky.app/profile/technadu.com/post/3mbr4tugwa22h", "content": "", "creation_timestamp": "2026-01-06T14:07:57.661052Z"}, {"uuid": "cb8e6dc9-3e70-4a65-a948-10b7eaccb72c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68668", "type": "seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3mbrd4k2z4j2f", "content": "", "creation_timestamp": "2026-01-06T16:00:09.089443Z"}, {"uuid": "9ede9f6c-aa3b-4f3c-9980-5df0719c9a1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68668", "type": "seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3mbrh7uip4o2i", "content": "", "creation_timestamp": "2026-01-06T17:13:34.857706Z"}, {"uuid": "8dc3f7f3-8392-445e-a038-c9b7fa92ec60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68668", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mbt2pi54eup2", "content": "", "creation_timestamp": "2026-01-07T08:42:16.722367Z"}, {"uuid": "268c50b1-51de-4b20-82f0-dced8b0bebc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68668", "type": "seen", "source": "https://bsky.app/profile/calimegai.bsky.social/post/3mbtcuih4r72q", "content": "", "creation_timestamp": "2026-01-07T11:00:58.067530Z"}, {"uuid": "4e0cfc6f-2c1f-4abb-b1f5-aeeed4b4f801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68668", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mbuhugn4uj2g", "content": "", "creation_timestamp": "2026-01-07T22:03:05.083961Z"}, {"uuid": "6d5cd1a4-baf8-4d42-a0b5-de7472d9bad8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68668", "type": "seen", "source": "https://bsky.app/profile/smartermsp.bsky.social/post/3mbwr6lhopl2y", "content": "", "creation_timestamp": "2026-01-08T19:55:08.450159Z"}, {"uuid": "dbd494c9-0d99-4b3f-8d2c-d274bf969ab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-68668", "type": "seen", "source": "https://social.tchncs.de/users/gborn/statuses/115863831460064295", "content": "", "creation_timestamp": "2026-01-09T06:56:05.190504Z"}, {"uuid": "a3107b1e-d064-4afd-ae02-0ec3360e69a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-68668", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/115883254278995297", "content": "", "creation_timestamp": "2026-01-12T17:15:34.821903Z"}, {"uuid": "0a60db54-3b13-4bce-8e12-43cd0f2924f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68668", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mcakabzxp22n", "content": "", "creation_timestamp": "2026-01-12T17:17:32.448343Z"}, {"uuid": "986825ae-9e45-4c81-8b54-f87c0c99e309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68668", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mcakagvxv22n", "content": "", "creation_timestamp": "2026-01-12T17:17:33.192700Z"}, {"uuid": "552d93d2-aa2d-4672-a18f-50c34fc393de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68668", "type": "seen", "source": "https://gist.github.com/alon710/5b476988f99b29bca643a5fed5e4789e", "content": "", "creation_timestamp": "2026-01-24T22:43:55.000000Z"}, {"uuid": "b0fc6f4f-4b8d-4825-bcc4-f367dd519b2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68668", "type": "seen", "source": "https://bsky.app/profile/wasm.activitypub.awakari.com.ap.brid.gy/post/3mdiakbafiyw2", "content": "", "creation_timestamp": "2026-01-28T12:10:35.342633Z"}, {"uuid": "12b9b3c7-2953-4266-8c01-e1f686891eee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68668", "type": "published-proof-of-concept", "source": "Telegram/enKzt3bxSKd8zB2DxOAdSs1JHzkbkyRgEfAWm4z9IF02rbM", "content": "", "creation_timestamp": "2026-01-05T18:04:56.000000Z"}, {"uuid": "598b792c-3597-4d67-9482-05097bd85154", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68668", "type": "published-proof-of-concept", "source": "https://t.me/ics_cert/1394", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0639\u0645\u0644\u06a9\u0631\u062f Code Node \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645 \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u06af\u0631\u062f\u0634 \u06a9\u0627\u0631 N8n \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0646\u0642\u0636 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u062d\u0641\u0627\u0638\u062a \u062f\u0627\u062f\u0647\u200c\u0647\u0627 \u0627\u0633\u062a. \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0628\u062f\u0647\u062f.\n\nCVE-2025-68668\n\n\u0646\u0635\u0628 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0645\u0639\u062a\u0628\u0631. \u0628\u0627 \u062a\u0648\u062c\u0647 \u0628\u0647 \u0634\u0631\u0627\u06cc\u0637 \u0645\u0648\u062c\u0648\u062f\u060c \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u062a\u0646\u0647\u0627 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0645\u0627\u0645\u06cc \u0631\u06cc\u0633\u06a9\u200c\u0647\u0627\u06cc \u0645\u0631\u062a\u0628\u0637 \u0646\u0635\u0628 \u0634\u0648\u0646\u062f.\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n- \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0627\u0645\u06a9\u0627\u0646 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0639\u0645\u0644\u06a9\u0631\u062f Code Node\u061b\n- \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0627\u0645\u06a9\u0627\u0646 \u0646\u0648\u0634\u062a\u0646 \u0648 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u067e\u0627\u06cc\u062a\u0648\u0646 \u0628\u0627 \u062a\u0646\u0638\u06cc\u0645 \u0645\u0642\u062f\u0627\u0631 false \u0628\u0631\u0627\u06cc \u0645\u062a\u063a\u06cc\u0631 N8N_PYTHON_ENABLED\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0647 \u067e\u0644\u062a\u0641\u0631\u0645 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u061b\n- \u0628\u062e\u0634\u200c\u0628\u0646\u062f\u06cc \u0634\u0628\u06a9\u0647 \u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u067e\u0644\u062a\u0641\u0631\u0645 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u062a\u0634\u062e\u06cc\u0635 \u0648 \u067e\u06cc\u0634\u06af\u06cc\u0631\u06cc \u0627\u0632 \u0646\u0641\u0648\u0630 \u0628\u0631\u0627\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc (\u06a9\u0634\u0641\u060c \u062b\u0628\u062a) \u0648 \u0648\u0627\u06a9\u0646\u0634 \u0628\u0647 \u062a\u0644\u0627\u0634\u200c\u0647\u0627\u06cc \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u061b\n- \u063a\u06cc\u0631\u0641\u0639\u0627\u0644\u200c\u0633\u0627\u0632\u06cc/\u062d\u0630\u0641 \u062d\u0633\u0627\u0628\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u06cc \u0628\u0644\u0627\u0627\u0633\u062a\u0641\u0627\u062f\u0647\u061b\n- \u062d\u062f\u0627\u0642\u0644 \u06a9\u0631\u062f\u0646 \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a \u06a9\u0627\u0631\u0628\u0631\u0627\u0646\u061b\n- \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u067e\u0644\u062a\u0641\u0631\u0645 \u0627\u0632 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u062e\u0627\u0631\u062c\u06cc (\u0627\u06cc\u0646\u062a\u0631\u0646\u062a).\n\n\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062a\u0648\u0635\u06cc\u0647\u200c\u0647\u0627:\nhttps://github.com/n8n-io/n8n/security/advisories/GHSA-62r4-hw23-cc8v\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "creation_timestamp": "2026-01-30T19:25:37.000000Z"}, {"uuid": "646112e3-c917-4311-be1c-bae6cfecd67f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68668", "type": "seen", "source": "Telegram/D1k-MMLLVlaE_jODR93PBAXEnqsTSYKToT4VT63wF63KDA", "content": "", "creation_timestamp": "2026-01-06T07:41:05.000000Z"}, {"uuid": "9df1f98c-527a-4127-8a44-bccdb29bf78b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68668", "type": "seen", "source": "https://t.me/cyberok_news/173", "content": "\ud83c\udf84 \u0420\u043e\u0436\u0434\u0435\u0441\u0442\u0432\u0435\u043d\u0441\u043a\u0438\u0439 Ni8mare\n\n\u041f\u043e\u043a\u0430 \u0432\u0441\u0435 \u0434\u043e\u043f\u0438\u0432\u0430\u044e\u0442 \u0433\u043b\u0438\u043d\u0442\u0432\u0435\u0439\u043d, \u0443 n8n \u2014 \u0441\u0432\u043e\u044f \u0440\u043e\u0436\u0434\u0435\u0441\u0442\u0432\u0435\u043d\u0441\u043a\u0430\u044f \u0441\u043a\u0430\u0437\u043a\u0430: \u0446\u0435\u043f\u043e\u0447\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442\u0441\u044f \u0441 \u0447\u0442\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0437\u0430\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u043e\u043c \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u0430. \n\n\ud83d\udcca \u041c\u0430\u0441\u0448\u0442\u0430\u0431 \n\u0421\u041a\u0418\u041f\u0410 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 \u0447\u0443\u0442\u044c \u043c\u0435\u043d\u0435\u0435 9000 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 n8n \u0432 \u0420\u0443\u043d\u0435\u0442\u0435. \u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0435 CyberOK, \u043e\u043a\u043e\u043b\u043e 70% \u2014 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b  \u0438\u0437-\u0437\u0430 \u0432\u0435\u0440\u0441\u0438\u0439 \u0438/\u0438\u043b\u0438 \u044d\u043a\u0441\u043f\u043e\u0437\u0438\u0446\u0438\u0438 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 webhook/form/endpoint-\u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432.\n\n\ud83e\udde9 \u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a \n\u042d\u0442\u043e \u043d\u0435 \u00ab\u043e\u0434\u0438\u043d \u0431\u0430\u0433\u00bb, \u0430 \u043d\u0430\u0431\u043e\u0440 \u043f\u0443\u0442\u0435\u0439-\u0434\u043e\u0440\u043e\u0436\u0435\u043a, \u0433\u0434\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0432\u044b\u0431\u0438\u0440\u0430\u0435\u0442 \u043c\u0430\u0440\u0448\u0440\u0443\u0442 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043d\u043e\u0434.\n\n1. CVE-2026-21858 \u2014 Arbitrary File Read (AFR)\n   \u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0447\u0442\u0435\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u043e\u0432. \u041e\u0442\u043b\u0438\u0447\u043d\u0430\u044f \u0442\u043e\u0447\u043a\u0430 \u0432\u0445\u043e\u0434\u0430: \u0441\u0435\u043a\u0440\u0435\u0442\u044b, \u0442\u043e\u043a\u0435\u043d\u044b, \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0435, \u043a\u043e\u043d\u0444\u0438\u0433\u0438.\n\n2. CVE-2026-21858 (AFR) + CVE-2025-68613 (RCE)\n   \u0415\u0441\u043b\u0438 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432\u044b\u0442\u0430\u0449\u0438\u0442\u044c \u043d\u0443\u0436\u043d\u044b\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b/\u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442 \u2014 \u0434\u0430\u043b\u044c\u0448\u0435 \u043c\u043e\u0436\u043d\u043e \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\n\n3. Pyodide Sandbox Escape \u2014 CVE-2025-68668 (\u043d\u0443\u0436\u0435\u043d Python Code Node)\n   \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442: \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0430\u043c, \u0433\u0434\u0435 \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f Python Code Node. \u0417\u0430\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b \u0443 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0439.\n\n4. Expression Injection \u2014 CVE-2025-68613 (\u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u0445)\n   \u0421\u0430\u043c\u044b\u0439 \u201c\u043f\u0440\u0430\u043a\u0442\u0438\u0447\u043d\u044b\u0439\u201d \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e: \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0440\u0435\u0434\u043a\u0438\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0438 \u0447\u0430\u0449\u0435 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u043e\u0434\u0435.\n\n\ud83e\udde0 \u041f\u043e\u0447\u0435\u043c\u0443 \u044d\u0442\u043e \u043e\u043f\u0430\u0441\u043d\u043e\n\u2014 n8n - \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0434\u0430\u0447 \u043c\u0435\u0436\u0434\u0443 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c\u0438, \u0447\u0430\u0441\u0442\u043e \u0436\u0438\u0432\u0451\u0442 \u043a\u0430\u043a \u201c\u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u043a\u043b\u0435\u0439\u201d \u0438 \u0434\u0435\u0440\u0436\u0438\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u044b \u043a\u043e \u0432\u0441\u0435\u043c\u0443: API-\u043a\u043b\u044e\u0447\u0438, \u0442\u043e\u043a\u0435\u043d\u044b, \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438, webhook-\u0441\u0435\u043a\u0440\u0435\u0442\u044b.\n\u2014 AFR \u0431\u044b\u0441\u0442\u0440\u043e \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u0432 \u201c\u0434\u043e\u0441\u0442\u0430\u043d\u044c \u0441\u0435\u043a\u0440\u0435\u0442 \u2192 \u0440\u0430\u0441\u0448\u0438\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u2192 \u0437\u0430\u043a\u0440\u0435\u043f\u0438\u0441\u044c\u201d.\n\u2014 Expression Injection \u043d\u0430 \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u0445 \u0441\u043d\u0438\u0436\u0430\u0435\u0442 \u043f\u043e\u0440\u043e\u0433 \u0432\u0445\u043e\u0434\u0430 \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0435\u0442 \u0448\u0430\u043d\u0441 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0439.\n\n\ud83d\udee1 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438\n1. \u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c n8n \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 (\u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u0446\u0435\u043f\u043e\u0447\u043a\u0443) \u0438 \u043f\u0435\u0440\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0440\u0435\u043b\u0438\u0437-\u043d\u043e\u0442\u044b \u043f\u043e \u0432\u0441\u0435\u043c CVE \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0435.\n2. \u0423\u0431\u0440\u0430\u0442\u044c n8n \u0438\u0437 \u043f\u0440\u044f\u043c\u043e\u0439 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u044d\u043a\u0441\u043f\u043e\u0437\u0438\u0446\u0438\u0438: VPN/allowlist/SSO, \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440, \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u044d\u043d\u0434\u043f\u043e\u0439\u043d\u0442\u043e\u0432.\n3. \u041f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0440\u0435\u0432\u0438\u0437\u0438\u044e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 webhook/forms: \u043a\u0430\u043a\u0438\u0435 \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u043d\u0443\u0436\u043d\u044b, \u043a\u0430\u043a\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u0433\u0434\u0435 \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u044b.\n4. \u0420\u043e\u0442\u0430\u0446\u0438\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f: \u0435\u0441\u043b\u0438 \u0438\u043d\u0441\u0442\u0430\u043d\u0441 \u043c\u043e\u0433 \u0431\u044b\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0438\u0437\u0432\u043d\u0435 \u2014 \u0441\u0447\u0438\u0442\u0430\u0442\u044c \u0442\u043e\u043a\u0435\u043d\u044b/\u043a\u043b\u044e\u0447\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438.\n5. \u0414\u043b\u044f SOC: \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0434\u0435\u0442\u0435\u043a\u0442\u044b \u043d\u0430 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0441\u043b\u0443\u0436\u0435\u0431\u043d\u044b\u043c \u044d\u043d\u0434\u043f\u043e\u0439\u043d\u0442\u0430\u043c \u0438 \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u044b\u0437\u043e\u0432\u044b workflow (\u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432\u043e\u043a\u0440\u0443\u0433 \u0444\u043e\u0440\u043c/\u0432\u0435\u0431\u0445\u0443\u043a\u043e\u0432).\n\n\u23f1\ufe0f \u0422\u0430\u0439\u043c\u043b\u0430\u0439\u043d \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432\n\u2022 2025-11-18 \u2014 VENDOR_FIX_RELEASED\n\u0412\u044b\u0448\u043b\u0430 n8n 1.121.0 \u2014 \u0432\u0435\u0440\u0441\u0438\u044f \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c (\u043f\u0430\u0442\u0447 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u0434\u043e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0439 \u043e\u0433\u043b\u0430\u0441\u043a\u0438).\n\u2022 2026-01-07 \u2014 VULN_PUBLISHED\n\u0417\u0430\u043f\u0438\u0441\u044c CVE \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0432 NVD (published date).\n\u2022 2026-01-07 \u2014 VENDOR_ADVISORY_PUBLISHED\nGitHub Security Advisory (GHSA-v4pr-fm98-w9pg): affected >= 1.65.0 \u0438 < 1.121.0, patched 1.121.0, \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 workaround \u043d\u0435\u0442.\n\u2022 2026-01-07 \u2014 THREAT_RESEARCH_PUBLISHED\n\u0422\u0435\u0445\u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 Cyera Research Labs: Ni8mare in n8n (CVE-2026-21858).\n\u2022 2026-01-07 11:09 \u2014 PUBLIC_POC_RELEASED\n\u041f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 PoC (\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0441 \u043e\u0442\u043c\u0435\u0442\u043a\u043e\u0439 disclosure time).\n\n\ud83d\udd17 \u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438\n\u2022 https://github.com/Chocapikk/CVE-2026-21858\n\u2022 https://nvd.nist.gov/vuln/detail/CVE-2025-68668\n\u2022 https://www.cyera.com/research-labs/ni8mare-unauthenticated-remote-code-execution-in-n8n-cve-2026-21858", "creation_timestamp": "2026-08-04T13:00:19.631546Z"}, {"uuid": "cedbf5c5-67e8-4ee1-9199-57f6967afb24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68668", "type": "seen", "source": "https://t.me/cyberok_news/173", "content": "\ud83c\udf84 \u0420\u043e\u0436\u0434\u0435\u0441\u0442\u0432\u0435\u043d\u0441\u043a\u0438\u0439 Ni8mare\n\n\u041f\u043e\u043a\u0430 \u0432\u0441\u0435 \u0434\u043e\u043f\u0438\u0432\u0430\u044e\u0442 \u0433\u043b\u0438\u043d\u0442\u0432\u0435\u0439\u043d, \u0443 n8n \u2014 \u0441\u0432\u043e\u044f \u0440\u043e\u0436\u0434\u0435\u0441\u0442\u0432\u0435\u043d\u0441\u043a\u0430\u044f \u0441\u043a\u0430\u0437\u043a\u0430: \u0446\u0435\u043f\u043e\u0447\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442\u0441\u044f \u0441 \u0447\u0442\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0437\u0430\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u043e\u043c \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u0430. \n\n\ud83d\udcca \u041c\u0430\u0441\u0448\u0442\u0430\u0431 \n\u0421\u041a\u0418\u041f\u0410 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 \u0447\u0443\u0442\u044c \u043c\u0435\u043d\u0435\u0435 9000 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 n8n \u0432 \u0420\u0443\u043d\u0435\u0442\u0435. \u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0435 CyberOK, \u043e\u043a\u043e\u043b\u043e 70% \u2014 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b  \u0438\u0437-\u0437\u0430 \u0432\u0435\u0440\u0441\u0438\u0439 \u0438/\u0438\u043b\u0438 \u044d\u043a\u0441\u043f\u043e\u0437\u0438\u0446\u0438\u0438 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 webhook/form/endpoint-\u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432.\n\n\ud83e\udde9 \u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a \n\u042d\u0442\u043e \u043d\u0435 \u00ab\u043e\u0434\u0438\u043d \u0431\u0430\u0433\u00bb, \u0430 \u043d\u0430\u0431\u043e\u0440 \u043f\u0443\u0442\u0435\u0439-\u0434\u043e\u0440\u043e\u0436\u0435\u043a, \u0433\u0434\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0432\u044b\u0431\u0438\u0440\u0430\u0435\u0442 \u043c\u0430\u0440\u0448\u0440\u0443\u0442 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043d\u043e\u0434.\n\n1. CVE-2026-21858 \u2014 Arbitrary File Read (AFR)\n   \u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0447\u0442\u0435\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u043e\u0432. \u041e\u0442\u043b\u0438\u0447\u043d\u0430\u044f \u0442\u043e\u0447\u043a\u0430 \u0432\u0445\u043e\u0434\u0430: \u0441\u0435\u043a\u0440\u0435\u0442\u044b, \u0442\u043e\u043a\u0435\u043d\u044b, \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0435, \u043a\u043e\u043d\u0444\u0438\u0433\u0438.\n\n2. CVE-2026-21858 (AFR) + CVE-2025-68613 (RCE)\n   \u0415\u0441\u043b\u0438 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432\u044b\u0442\u0430\u0449\u0438\u0442\u044c \u043d\u0443\u0436\u043d\u044b\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b/\u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442 \u2014 \u0434\u0430\u043b\u044c\u0448\u0435 \u043c\u043e\u0436\u043d\u043e \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\n\n3. Pyodide Sandbox Escape \u2014 CVE-2025-68668 (\u043d\u0443\u0436\u0435\u043d Python Code Node)\n   \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442: \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0430\u043c, \u0433\u0434\u0435 \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f Python Code Node. \u0417\u0430\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b \u0443 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0439.\n\n4. Expression Injection \u2014 CVE-2025-68613 (\u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u0445)\n   \u0421\u0430\u043c\u044b\u0439 \u201c\u043f\u0440\u0430\u043a\u0442\u0438\u0447\u043d\u044b\u0439\u201d \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e: \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0440\u0435\u0434\u043a\u0438\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0438 \u0447\u0430\u0449\u0435 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u043e\u0434\u0435.\n\n\ud83e\udde0 \u041f\u043e\u0447\u0435\u043c\u0443 \u044d\u0442\u043e \u043e\u043f\u0430\u0441\u043d\u043e\n\u2014 n8n - \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0434\u0430\u0447 \u043c\u0435\u0436\u0434\u0443 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c\u0438, \u0447\u0430\u0441\u0442\u043e \u0436\u0438\u0432\u0451\u0442 \u043a\u0430\u043a \u201c\u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u043a\u043b\u0435\u0439\u201d \u0438 \u0434\u0435\u0440\u0436\u0438\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u044b \u043a\u043e \u0432\u0441\u0435\u043c\u0443: API-\u043a\u043b\u044e\u0447\u0438, \u0442\u043e\u043a\u0435\u043d\u044b, \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438, webhook-\u0441\u0435\u043a\u0440\u0435\u0442\u044b.\n\u2014 AFR \u0431\u044b\u0441\u0442\u0440\u043e \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u0432 \u201c\u0434\u043e\u0441\u0442\u0430\u043d\u044c \u0441\u0435\u043a\u0440\u0435\u0442 \u2192 \u0440\u0430\u0441\u0448\u0438\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u2192 \u0437\u0430\u043a\u0440\u0435\u043f\u0438\u0441\u044c\u201d.\n\u2014 Expression Injection \u043d\u0430 \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u0445 \u0441\u043d\u0438\u0436\u0430\u0435\u0442 \u043f\u043e\u0440\u043e\u0433 \u0432\u0445\u043e\u0434\u0430 \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0435\u0442 \u0448\u0430\u043d\u0441 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0439.\n\n\ud83d\udee1 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438\n1. \u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c n8n \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 (\u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u0446\u0435\u043f\u043e\u0447\u043a\u0443) \u0438 \u043f\u0435\u0440\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0440\u0435\u043b\u0438\u0437-\u043d\u043e\u0442\u044b \u043f\u043e \u0432\u0441\u0435\u043c CVE \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0435.\n2. \u0423\u0431\u0440\u0430\u0442\u044c n8n \u0438\u0437 \u043f\u0440\u044f\u043c\u043e\u0439 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u044d\u043a\u0441\u043f\u043e\u0437\u0438\u0446\u0438\u0438: VPN/allowlist/SSO, \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440, \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u044d\u043d\u0434\u043f\u043e\u0439\u043d\u0442\u043e\u0432.\n3. \u041f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0440\u0435\u0432\u0438\u0437\u0438\u044e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 webhook/forms: \u043a\u0430\u043a\u0438\u0435 \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u043d\u0443\u0436\u043d\u044b, \u043a\u0430\u043a\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u0433\u0434\u0435 \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u044b.\n4. \u0420\u043e\u0442\u0430\u0446\u0438\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f: \u0435\u0441\u043b\u0438 \u0438\u043d\u0441\u0442\u0430\u043d\u0441 \u043c\u043e\u0433 \u0431\u044b\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0438\u0437\u0432\u043d\u0435 \u2014 \u0441\u0447\u0438\u0442\u0430\u0442\u044c \u0442\u043e\u043a\u0435\u043d\u044b/\u043a\u043b\u044e\u0447\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438.\n5. \u0414\u043b\u044f SOC: \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0434\u0435\u0442\u0435\u043a\u0442\u044b \u043d\u0430 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0441\u043b\u0443\u0436\u0435\u0431\u043d\u044b\u043c \u044d\u043d\u0434\u043f\u043e\u0439\u043d\u0442\u0430\u043c \u0438 \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u044b\u0437\u043e\u0432\u044b workflow (\u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432\u043e\u043a\u0440\u0443\u0433 \u0444\u043e\u0440\u043c/\u0432\u0435\u0431\u0445\u0443\u043a\u043e\u0432).\n\n\u23f1\ufe0f \u0422\u0430\u0439\u043c\u043b\u0430\u0439\u043d \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432\n\u2022 2025-11-18 \u2014 VENDOR_FIX_RELEASED\n\u0412\u044b\u0448\u043b\u0430 n8n 1.121.0 \u2014 \u0432\u0435\u0440\u0441\u0438\u044f \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c (\u043f\u0430\u0442\u0447 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u0434\u043e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0439 \u043e\u0433\u043b\u0430\u0441\u043a\u0438).\n\u2022 2026-01-07 \u2014 VULN_PUBLISHED\n\u0417\u0430\u043f\u0438\u0441\u044c CVE \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0432 NVD (published date).\n\u2022 2026-01-07 \u2014 VENDOR_ADVISORY_PUBLISHED\nGitHub Security Advisory (GHSA-v4pr-fm98-w9pg): affected >= 1.65.0 \u0438 < 1.121.0, patched 1.121.0, \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 workaround \u043d\u0435\u0442.\n\u2022 2026-01-07 \u2014 THREAT_RESEARCH_PUBLISHED\n\u0422\u0435\u0445\u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 Cyera Research Labs: Ni8mare in n8n (CVE-2026-21858).\n\u2022 2026-01-07 11:09 \u2014 PUBLIC_POC_RELEASED\n\u041f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 PoC (\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0441 \u043e\u0442\u043c\u0435\u0442\u043a\u043e\u0439 disclosure time).\n\n\ud83d\udd17 \u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438\n\u2022 https://github.com/Chocapikk/CVE-2026-21858\n\u2022 https://nvd.nist.gov/vuln/detail/CVE-2025-68668\n\u2022 https://www.cyera.com/research-labs/ni8mare-unauthenticated-remote-code-execution-in-n8n-cve-2026-21858", "creation_timestamp": "2026-08-05T00:00:36.412640Z"}, {"uuid": "3d5c21ec-0905-444b-af8f-3973c82e54e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68668", "type": "seen", "source": "https://t.me/securixy_kz/1282", "content": "\ud83d\udea8 \u0415\u0449\u0435 \u043e\u0434\u043d\u0430 RCE \u0432 n8n -  CVE\u20112025\u201168668 (CVSS 9.9)  \n\u041f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0430 Pyodide \u0432 Python Code Node \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0434\u044b\u0440\u044f\u0432\u043e\u0439\n\n\ud83d\udca1 \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441 \u043f\u0440\u0430\u0432\u043e\u043c \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c workflow \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0445\u043e\u0441\u0442\u0435  \n\n\u26a0\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 1.0.0 \u0434\u043e 2.0.0  \n\n\ud83d\udee1 \u0417\u0430\u0449\u0438\u0442\u0430  \n\u2022 \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.0.0 \u0438 \u0432\u044b\u0448\u0435  \n\u2022 \u041f\u0440\u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c Python Code Node  \n\u2022 \u041e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 workflow  \n\u2022 \u0418\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c n8n \u0438 \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438:  \nhttps://github.com/n8n-io/n8n/security/advisories/GHSA-62r4-hw23-cc8v\n\nhttps://securityonline.info/n8n-sandbox-escape-how-cve-2025-68668-turns-workflows-into-weapons/", "creation_timestamp": "2026-07-12T22:00:06.470094Z"}, {"uuid": "254348ff-d464-4291-ad9d-aa4b839626a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-68668", "type": "published-proof-of-concept", "source": "https://t.me/securixy_kz/1282", "content": "\ud83d\udea8 \u0415\u0449\u0435 \u043e\u0434\u043d\u0430 RCE \u0432 n8n -  CVE\u20112025\u201168668 (CVSS 9.9)  \n\u041f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0430 Pyodide \u0432 Python Code Node \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0434\u044b\u0440\u044f\u0432\u043e\u0439\n\n\ud83d\udca1 \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441 \u043f\u0440\u0430\u0432\u043e\u043c \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c workflow \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0445\u043e\u0441\u0442\u0435  \n\n\u26a0\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 1.0.0 \u0434\u043e 2.0.0  \n\n\ud83d\udee1 \u0417\u0430\u0449\u0438\u0442\u0430  \n\u2022 \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.0.0 \u0438 \u0432\u044b\u0448\u0435  \n\u2022 \u041f\u0440\u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c Python Code Node  \n\u2022 \u041e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 workflow  \n\u2022 \u0418\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c n8n \u0438 \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438:  \nhttps://github.com/n8n-io/n8n/security/advisories/GHSA-62r4-hw23-cc8v\n\nhttps://securityonline.info/n8n-sandbox-escape-how-cve-2025-68668-turns-workflows-into-weapons/", "creation_timestamp": "2026-07-13T00:00:15.896356Z"}]}