All vulnerabilities

Servers and applications

CVE-2025-49592

n8n is a workflow automation platform. Versions prior to 1.98.0 have an Open Redirect vulnerability in the login flow. Authenticated users can be redirected to untrusted, attacker-controlled domains after logging in, by crafting malicious URLs with a misleading redirect query parameter. This may lead to phishing attacks by impersonating the n8n UI on lookalike domains (e.g., n8n.local.evil.com),…

Severity
Medium 5.4
Published
26 Jun 2025
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.98.0
Sources
NVD

Affected software

SoftwareAffected versions
n8nServers and applications · cpe:a:n8n:n8n
  • Every version before 1.98.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-49592
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-49592