PT-2026-103790

CVE-2026-103257

تاريخ النشر

2026-10-01

تاريخ التحديث

2026-10-01

الوصف من

CVSS 4.0

8.1

عالية

المقاييسAV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:P

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.80 n8n versions 2.0.0 through 2.39.5 n8n versions 2.40.0

Description A path traversal issue exists in the n8n node due to improper validation of resource identifiers. This allows attackers to use malicious resource IDs to redirect API calls to unintended resources, potentially granting unauthorized access to workflows, executions, and credential secrets within the scope of the API key.

Recommendations Update to version 1.123.80 or later. Update to version 2.39.6 or later. Update to version 2.40.1 or later.

قابلية الاستغلال

استغلال

إصلاح

التأثيرات

الباحثون

Nlgbao1340

المورّدون

المنتجات المتأثرة

تصنيف نقاط الضعف

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')

المعرّفات ذات الصلة