Servers and applications
CVE-2025-49595
n8n is a workflow automation platform. Prior to version 1.99.0, there is a denial of Service vulnerability in /rest/binary-data endpoint when processing empty filesystem URIs (filesystem:// or filesystem-v2://). This allows authenticated attackers to cause service unavailability through malformed filesystem URI requests, effecting the /rest/binary-data endpoint and n8n.cloud instances (confirmed…
- Severity
- Medium 4.9
- Published
- 3 Jul 2025
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 1.99.0
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
n8nServers and applications · cpe:a:n8n:n8n |
|