CVE-2026-25055
1 advisory.
npm/n8n CVE-2026-25055: high, EPSS 1.89%
n8n Vulnerable to Arbitrary File Write on Remote Systems via SSH Node
Action: Upgrade n8n to 1.123.12 or later.
npm i n8n@2.4.0npm i n8n@1.123.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.4.0 | - |
| 0 | 1.123.12 | - |
Fixed versions
| 2.4.0 | 1.123.12 |
Sources
- osv: GHSA-m82q-59gv-mcr9
- https://github.com/n8n-io/n8n/security/advisories/GHSA-m82q-59gv-mcr9
- https://nvd.nist.gov/vuln/detail/CVE-2026-25055
- https://github.com/n8n-io/n8n/commit/528ad6b982d0519ec170e172f57b7fdbbe175230
- https://github.com/n8n-io/n8n/commit/e0baf48c6a54808f6dbca8cb352bfa306092c223
- https://github.com/n8n-io/n8n
CVE-2026-25055 · published · modified · JSON