10 matches found
n8n-RCE
n8n RCE 已修复 通过 n8n 工作流执行远程代码 基于 CVE-2025-68613 ⚠️ 仅供教育目的 📚 安装与使用 🛠️ $ git clone https://github.com/AbdulRKB/n8n-RCE.git $ cd n8n-RCE $ pip install -r requirements.txt $ python exploit.py -u -e -p...
CVE-2026-59206 n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration
n8n is an open source workflow automation platform. Prior to 1.123.61, 2.27.4, and, 2.28.1, an authenticated user with the default workflow:create permission could pollute Object.prototype through a crafted workflow saved, updated, or imported via the workflow API, allowing unauthenticated reques...
EUVD-2025-25785
Malicious code in bioql PyPI...
CVE-2025-55526
n8n-workflows Main Commit ee25413 allows attackers to execute a directory traversal via the downloadworkflow function within apiserver.py...
CVE-2025-55526
n8n-workflows Main Commit ee25413 allows attackers to execute a directory traversal via the downloadworkflow function within apiserver.py...
PT-2025-34765 · Unknown · N8N-Workflows
Name of the Vulnerable Software and Affected Versions: n8n-workflows affected versions not specified Description: The software contains a directory traversal flaw within the download workflow function located in the api server.py file. This allows attackers to potentially access and manipulate...
CVE-2025-55526: Improper Limitation of a Pathname to a Restricted Directory
n8n-workflows Main Commit ee25413 allows attackers to execute a directory traversal via the downloadworkflow function within apiserver.py...
CVE-2025-55526
n8n-workflows Main Commit ee25413 allows attackers to execute a directory traversal via the downloadworkflow function within apiserver.py...
CVE-2025-55526
The n8n-workflows software (specifically commit ee25413 ) contains a directory traversal vulnerability within the download_workflow function located in api_server.py. This flaw allows attackers to potentially access and manipulate files outside the intended directory. While the vulnerability is c...
