n8n Directory Traversal vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-27562 · ADVISORY
• n8n-io/n8n#5522 · WEB
• n8n-io/n8n#5523 · WEB
• n8n-io/n8n commit 40b9784 · WEB
• n8n-io/n8n commit fb07d77 · WEB
• n8n-io/n8n · PACKAGE
• n8n-io/n8n release [email protected] · WEB
• security.netapp.com/advisory/ntap-20230622-0007 · WEB
• synacktiv.com/sites/default/files/2023-05/Synacktiv-N8N-Multiple-Vulnerabilities_0.pdf · WEB
• n8n-io/n8n release · Release Notes
• security.netapp.com/advisory/ntap-20230622-0007

n8n のその他の脆弱性

• CVE-2026-86996中 5.4n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the workflow setting named This workflow can be called by wa…
• CVE-2026-86995中 4.3n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node validated the repository parameter f…
• CVE-2026-86994中 4.3n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the /rest/active-workflows endpoint returned ever…
• CVE-2026-86993中 4.9n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, a Log Streaming event destination could reference…
• CVE-2026-86085中 4.9n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /rest/roles/:slug/assignments and /rest/roles/:slug/assi…