2 matches found
PT-2026-60116
n8n before 2.19.3 contains a file path restriction bypass in the legacy ExecuteWorkflow node's localFile source option, which reads workflow files from disk without the file-access checks enforced by other file-reading nodes. Although hidden from the UI since v1.2, it remains reachable via the RE...
6.4CVSS6.2AI score0.00328EPSS
SaveExploits0References3
PT-2026-57194
Name of the Vulnerable Software and Affected Versions praisonaiagents versions prior to 1.6.78 Description An unsafe dynamic module loading issue exists in the AgentFlow. resolve pydantic class function. When a workflow step utilizes a string output pydantic reference, the framework imports a...
8.5CVSS6.4AI score0.00174EPSS
SaveExploits0References4
20