Vulnerability · Published Jul 3, 2025 · Assigned by GitHub_M

CVE-2025-52554n8n Improper Authorization in Workflow Execution Stop Endpoint Allows Terminating Other Users’ Workflows

Medium 4.9

In plain English

A medium-severity missing authorization in n8n from n8n-io. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 4.0)4.9Medium

Exploit odds (30 days)0.4%top 69.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

n8n is a workflow automation platform. Prior to version 1.99.1, an authorization vulnerability was discovered in the /rest/executions/:id/stop endpoint of n8n. An authenticated user can stop workflow executions that they do not own or that have not been shared with them, leading to potential business disruption. This issue has been patched in version 1.99.1. A workaround involves restricting access to the /rest/executions/:id/stop endpoint via reverse proxy or API gateway.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
npm	n8n	1.99.1	GHSA-gq57-v332-7666

Affected products (as reported)

Vendor	Product	Versions
n8n-io	n8n	< 1.99.1

Weakness: CWE-862 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:H

References

https://github.com/n8n-io/n8n/security/advisories/GHSA-gq57-v332-7666 x_refsource_CONFIRM
https://github.com/n8n-io/n8n/pull/16405 x_refsource_MISC
https://github.com/dudanogueira/n8n/commit/ca2f90c7fbaa1d661ade2f45d587d9469bc287e1 x_refsource_MISC
https://github.com/n8n-io/n8n/commit/e5edc60e344924230baafb11fa1f0af788e9ca9a x_refsource_MISC