CVE-2026-25053

CVSS Score & Metrics

Base Score

9.9 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H                                    

Vulnerability Description

n8n is an open source workflow automation platform. Prior to versions 1.123.10 and 2.5.0, vulnerabilities in the Git node allowed authenticated users with permission to create or modify workflows to execute arbitrary system commands or read arbitrary files on the n8n host. This issue has been patched in versions 1.123.10 and 2.5.0.

Vulnerability Details

Published Date

February 04, 2026

Last Modified

February 05, 2026

CWE ID

CWE-78

Source

NVD

Vendor

n8n-io

Product

n8n

External References

https://github.com/n8n-io/n8n/security/advisories/GHSA-9g95-qf3f-ggrw

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment