All vulnerabilities

Servers and applications

CVE-2025-57749

n8n is a workflow automation platform. Before 1.106.0, a symlink traversal vulnerability was discovered in the Read/Write File node in n8n. While the node attempts to restrict access to sensitive directories and files, it does not properly account for symbolic links (symlinks). An attacker with the ability to create symlinks—such as by using the Execute Command node—could exploit this to bypass…

Severity
Medium 6.5
Published
20 Aug 2025
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.106.0
Sources
NVD

Affected software

SoftwareAffected versions
n8nServers and applications · cpe:a:n8n:n8n
  • Every version before 1.106.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-57749
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-57749