CVE-2025-55526

CRITICAL 9.1EPSS 0.8%

n8n-workflows Main Commit ee25413 allows attackers to execute a directory traversal via the download_workflow function within api_server.py

CVSS v3.1: 9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS: 0.81% chance of exploitation in the next 30 days, 54th percentile
Published: 2025-08-26
Updated: 2025-08-27

Proof-of-concept exploits (1)

Zie619/n8n-workflows/issues/48

References

Related