{"action":"Upgrade n8n to 1.99.1 or later.","affected":[{"fixed":"1.99.1","introduced":"0"}],"component":"n8n","cve_ids":["CVE-2025-52554"],"ecosystem":"npm","epss":0.00367,"exploited":false,"fixed_versions":["1.99.1"],"ghsa_id":"GHSA-gq57-v332-7666","id":"tcs_01M5KFS9D5QQSBT27AD9CJRXM9","modified_at":"2025-07-03T21:50:48Z","published_at":"2025-07-03T20:23:35Z","references":["https://osv.dev/vulnerability/GHSA-gq57-v332-7666","https://github.com/n8n-io/n8n/security/advisories/GHSA-gq57-v332-7666","https://nvd.nist.gov/vuln/detail/CVE-2025-52554","https://github.com/n8n-io/n8n/pull/16405","https://github.com/dudanogueira/n8n/commit/ca2f90c7fbaa1d661ade2f45d587d9469bc287e1","https://github.com/n8n-io/n8n/commit/e5edc60e344924230baafb11fa1f0af788e9ca9a","https://github.com/n8n-io/n8n"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-gq57-v332-7666","url":"https://osv.dev/vulnerability/GHSA-gq57-v332-7666"}],"summary":"n8n is vulnerable to Improper Authorization through its `/stop` endpoint"}