#VU121206 Incorrect Regular Expression in n8n - CVE-2025-68949
Published: January 13, 2026
Vulnerability identifier: #VU121206
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2025-68949
CWE-ID: CWE-185
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerable software:
n8n
n8n
Software vendor:
n8n
n8n
Description
The vulnerability allows a remote attacker to bypass IP whitelisting.
The vulnerability exists due to application is using martial string matching instead of exact IP comparison when making a decision to allow access from a specific IP address. A remote attacker can bypass configured rules for whitelisted IP addresses and gain unauthorized access to the application. The vulnerability affects both Pv4 and IPv6 addresses.
Remediation
Install updates from vendor's website.