PT-2026-6261 · N8N · N8N

Theolelasseux · Published 2026-02-04 · Updated 2026-02-05 · CVE-2026-25052

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.18 n8n versions prior to 2.5.0

Description n8n is a workflow automation platform. A flaw in the file access controls allows authenticated users with appropriate permissions to read sensitive files from the n8n host system. This could lead to the exposure of critical configuration data and user credentials, potentially resulting in complete account takeover. The issue affects instances where users have the ability to create or modify workflows.

Recommendations Update n8n to version 1.123.18 or later. Update n8n to version 2.5.0 or later.

Exploit

Fix

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

BDU:2026-02167

CVE-2026-25052

GHSA-GFVG-QV54-R4PC

Affected Products

N8N

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25052.json · Exploit
• https://github.com/n8n-io/n8n/security/advisories/GHSA-gfvg-qv54-r4pc · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-gfvg-qv54-r4pc · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02167 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-25052 · Security Note
• https://osv.dev/vulnerability/CVE-2026-25052 · Vendor Advisory
• https://github.com/n8n-io/n8n · Note
• https://twitter.com/VulmonFeeds/status/2019172911962087843 · Twitter Post
• https://twitter.com/TheHackerWire/status/2019531703942017448 · Twitter Post
• https://twitter.com/CVEnew/status/2019110904328274343 · Twitter Post