CVE Research

INTRODUCTION CVE-2025-68668 is a sandbox bypass vulnerability in n8n , an open source workflow automation platform widely used for internal tooling, integrations, and automation pipelines. The flaw affects n8n versions from 1.0.0 up to, but not including, 2.0.0 , and allows an authenticated user with permission to create or modify workflows to execute arbitrary operating system commands on the host running n8n . At the center of this issue is the Python Code Node , which reli

Introduction CVE-2025-13915 is a critical authentication bypass vulnerability affecting IBM API Connect , an enterprise API management platform used by organizations to publish, manage, and secure APIs. The issue allows a remote attacker to access protected components without proper authentication, effectively skipping the login checks that should block unauthenticated requests. IBM rated the flaw 9.8 on the CVSS scale, which already shows how serious the impact can be in rea