Vulnerability · Published Feb 4, 2026 · Assigned by GitHub_M

CVE-2026-25052n8n Improper File Access Controls Allow Arbitrary File Read by Authenticated Users

Critical 9.4

In plain English

A critical-severity security flaw in n8n from n8n-io. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 4.0)9.4Critical

Exploit odds (30 days)0.3%top 73.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

n8n is an open source workflow automation platform. Prior to versions 1.123.18 and 2.5.0, a vulnerability in the file access controls allows authenticated users with permission to create or modify workflows to read sensitive files from the n8n host system. This can be exploited to obtain critical configuration data and user credentials, leading to complete account takeover of any user on the instance. This issue has been patched in versions 1.123.18 and 2.5.0.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
npm	n8n	2.5.0	GHSA-gfvg-qv54-r4pc
npm	n8n	1.123.18	GHSA-gfvg-qv54-r4pc

Affected products (as reported)

Vendor	Product	Versions
n8n-io	n8n	< 1.123.18< 2.5.0

Weakness: CWE-367 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

References

https://github.com/n8n-io/n8n/security/advisories/GHSA-gfvg-qv54-r4pc x_refsource_CONFIRM