PT-2026-6264 · N8N · N8N

Jjjutla + 1 · Published 2026-02-04 · Updated 2026-02-05 · CVE-2026-25055

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.12 n8n versions prior to 2.4.0

Description n8n is a workflow automation platform. Before versions 1.123.12 and 2.4.0, workflows processing uploaded files and transferring them to remote servers via the SSH node lacked validation of file metadata. This could allow files to be written to unintended locations on remote systems, potentially leading to remote code execution. An attacker needs knowledge of existing workflows and unauthenticated access to file upload endpoints to exploit this issue.

Recommendations Update n8n to version 1.123.12 or later. Update n8n to version 2.4.0 or later.

Exploit

Fix

RCE

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2026-02170

CVE-2026-25055

GHSA-M82Q-59GV-MCR9

Affected Products

N8N

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25055.json · Exploit
• https://github.com/n8n-io/n8n/security/advisories/GHSA-m82q-59gv-mcr9 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25055 · Security Note
• https://osv.dev/vulnerability/GHSA-m82q-59gv-mcr9 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02170 · Security Note
• https://osv.dev/vulnerability/CVE-2026-25055 · Vendor Advisory
• https://github.com/n8n-io/n8n · Note
• https://github.com/n8n-io/n8n/commit/528ad6b982d0519ec170e172f57b7fdbbe175230 · Note
• https://github.com/n8n-io/n8n/commit/e0baf48c6a54808f6dbca8cb352bfa306092c223 · Note
• https://twitter.com/AhammodOvi69/status/2019422819944157578 · Twitter Post
• https://twitter.com/CVEnew/status/2019110901656465917 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2019165232145322497 · Twitter Post
• https://twitter.com/TheHackerWire/status/2019544268776566955 · Twitter Post