Vulnerability · Published Oct 1, 2026 · Assigned by VulnCheck

CVE-2026-103257n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via n8n Node

High 7.7

In plain English

A high-severity path traversal in n8n from n8n-io. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities).

Severity (CVSS 3.1)7.7High

Exploit odds (30 days)0.4%top 62.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a path traversal vulnerability in the n8n node that fails to validate resource identifiers. Attackers can craft malicious resource IDs to redirect API calls to unintended resources, allowing unauthorized access to workflows, executions, and credential secrets within the API key's scope.

Affected products (as reported)

Vendor	Product	Versions
n8n-io	n8n	0 – before 1.123.802.0.0 – before 2.39.62.40.0 – before 2.40.1

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

References

GitHub Security Advisory (GHSA-89p4-6h98-c7xm) vendor-advisory
VulnCheck Advisory: n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal via n8n Node third-party-advisory