CVE-2026-56352

CVE-2026-56352 affects n8n prior to 2.19.3. The legacy ExecuteWorkflow node’s localFile source can read workflow files from disk without the standard file-access checks, even though this behavior is hidden from the UI since v1.2. An authenticated user who can create or modify workflows can supply...