UpHeron
All vulnerabilities

Servers and applications

CVE-2025-56265

An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.100.1, and v1.101.1 allows attackers to execute arbitrary code via uploading a crafted HTML file.

Severity
High 8.8
Published
8 Sept 2025
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
n8nServers and applications · cpe:a:n8n:n8n
  • Version 1.95.3
  • Version 1.100.1
  • Version 1.101.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-56265
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-56265