CVE Catalog
CVE-2025-55526
CriticalCVSS 9.1Exploitation Probability (EPSS)
Elevated risk0.82%
54th percentile - higher than 54% of all known CVEs
Summary
In n8n-workflows (commit ee25413), the download_workflow function in api_server.py allows attackers to perform directory traversal.
Risk Assessment
An attacker can read arbitrary files from the system, potentially leading to disclosure of sensitive data or further compromise.
Recommendation
Update n8n-workflows to a patched version and restrict access to the API.
Original NVD description (English source)
n8n-workflows Main Commit ee25413 allows attackers to execute a directory traversal via the download_workflow function within api_server.py