5 matches found
Arbitrary File Upload
@n8n/n8n-nodes-langchain is vulnerable to Arbitrary File Upload. The vulnerability is due to improper validation and handling of uploaded files in the Chat Trigger component, which allows an attacker to upload a crafted HTML file and execute arbitrary code on the affected system...
EUVD-2025-27160
Malicious code in bioql PyPI...
GHSA-MVH4-2CM2-6HPG Stored XSS in n8n LangChain Chat Trigger Node via initialMessages Parameter
Impact A stored Cross-Site Scripting XSS vulnerability was identified in the @n8n/n8n-nodes-langchain.chatTrigger node in n8n. If an authorized user configures the node with malicious JavaScript in the initialMessages field and enables public access, the script will be executed in the browser of...
CVE-2025-56265
The workflow automation tool N8N versions v1.95.3 , v1.100.1 , and v1.101.1 are vulnerable to an arbitrary file upload flaw within the Chat Trigger component. Attackers can exploit this by uploading a crafted HTML file to achieve arbitrary code execution . To remediate this vulnerability, users s...