CVE-2026-56352

Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.19.3

Description A file path restriction bypass exists in the legacy ExecuteWorkflow node's localFile source option. This option reads workflow files from disk without the file-access checks applied to other file-reading nodes. While hidden from the user interface since version 1.2, the functionality remains accessible via the REST API. An authenticated user with permissions to create or modify workflows can provide an arbitrary file path to bypass the N8N RESTRICT FILE ACCESS TO restriction. This allows the user to verify the existence of arbitrary files on the host and, if the targeted path contains a valid workflow JSON file, load and execute that file.

Recommendations Update to version 2.19.3 or later.