Path Traversal

@makafeli/n8n-workflow-builder is vulnerable to path traversal. The vulnerability is due to improper validation of the filePath argument in the updatenodefromfile function in build/server.cjs, which allows a local attacker to manipulate file paths to access files outside the intended directory...

CVE-2026-15521 makafeli n8n-workflow-builder update_node_from_file server.cjs path traversal

A vulnerability was identified in makafeli n8n-workflow-builder up to 0.11.0. Affected is an unknown function of the file build/server.cjs of the component updatenodefromfile. The manipulation of the argument filePath leads to path traversal. An attack has to be approached locally. The exploit is...

CVE-2026-15521: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was identified in makafeli n8n-workflow-builder up to 0.11.0. Affected is an unknown function of the file build/server.cjs of the component updatenodefromfile. The manipulation of the argument filePath leads to path traversal. An attack has to be approached locally. The exploit is...