PT-2026-6265

CVE-2026-25056

Published

2026-02-04

Updated

2026-06-18

Description by

CVSS 4.0

9.4

Critical

MetricsAV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.118.0 n8n versions prior to 2.4.0

Description n8n is a workflow automation platform. A flaw in the Merge node’s SQL Query mode permitted authenticated users with workflow creation or modification rights to write arbitrary files to the n8n server’s filesystem, potentially resulting in remote code execution. The issue affects users with the ability to create or modify workflows.

Recommendations Update to n8n version 1.118.0 or later. Update to n8n version 2.4.0 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Nlgbao1340

Vendors

Affected products

Weakness enumeration

CWE-434: Unrestricted Upload of File with Dangerous Type

CWE-693: Protection Mechanism Failure