CVE-2025-58177
1 advisory.
npm/n8n CVE-2025-58177: medium 4.1, EPSS 0.24%
Stored XSS in n8n LangChain Chat Trigger Node via initialMessages Parameter
Action: Upgrade n8n to 1.107.0 or later.
npm i n8n@1.107.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.24.0 | 1.107.0 | - |
Fixed versions
| 1.107.0 |
Sources
- osv: GHSA-mvh4-2cm2-6hpg
- https://github.com/n8n-io/n8n/security/advisories/GHSA-mvh4-2cm2-6hpg
- https://nvd.nist.gov/vuln/detail/CVE-2025-58177
- https://github.com/n8n-io/n8n/pull/18148
- https://github.com/n8n-io/n8n/commit/d4ef191be0b39b65efa68559a3b8d5dad2e102b2
- https://docs.n8n.io/hosting/securing/blocking-nodes
- https://github.com/n8n-io/n8n
CVE-2025-58177 · published · modified · JSON