CVE-2025-57749 json
n8n has a symlink traversal vulnerability in "Read/Write File" node allows access to restricted files
published last yr. modified 4mo ago also EUVD-2025-25404 , GHSA-ggjm-f3g4-rwmm
- cvss
- 6.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.5%
- EPSS 0.5% chance of exploitation in 30 days, percentile 42%
- public exploits
- 0
- none known
Summary
n8n is a workflow automation platform. Before 1.106.0, a symlink traversal vulnerability was discovered in the Read/Write File node in n8n. While the node attempts to restrict access to sensitive directories and files, it does not properly account for symbolic links (symlinks). An attacker with the ability to create symlinks—such as by using the Execute Command node—could exploit this to bypass the intended directory restrictions and read from or write to otherwise inaccessible paths. Users of n8n.cloud are not impacted. Affected users should update to version 1.106.0 or later.
Patch / fix
- npm n8n 1.106.0
- n8n n8n 1.106.0
- github.com/n8n-io/n8n@c2c3e08 commit
- github.com/n8n-io/n8n#17735 pull request
Is CVE-2025-57749 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerCISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- last yr.
Exploit prediction
0.49% chance of exploitation in the next 30 days, higher than 42% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| GitHub | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| npm | n8n | <1.106.0 |
1.106.0 |
Affected products
- n8n-io n8n
Classification
References
-
github.com
/n8n-io/n8n/pull/17735
web, patch
-
github.com
/n8n-io/n8n/commit/c2c3e08cdf33570d9051e659812cbfbdd3c077fd
web
-
github.com
/n8n-io/n8n/security/advisories/GHSA-ggjm-f3g4-rwmm
web, vendor-advisory
-
nvd.nist.gov
/vuln/detail/CVE-2025-57749
advisory
-
github.com
/n8n-io/n8n
package
Sources
- CVE List CVE-2025-57749
- GitHub Advisory GHSA-ggjm-f3g4-rwmm
- NVD CVE-2025-57749
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.