CISA ordered federal agencies to patch an actively exploited n8n remote code execution flaw (CVE-2025-68613). The vulnerability lets authenticated attackers run code as the n8n process and risks exposure of API keys, database credentials, OAuth tokens, and CI/CD secrets held in workflows. Apply n8n
Part of the PlainSec briefing for 2026-03-25