vulnti.work

n8n-workflows Main Commit ee25413 allows attackers to execute a directory traversal via the download_workflow function within api_server.py

Critical CVSS 9.1
CVECVE-2025-55526
First seen2026-08-20 15:15 UTC
Disclosed2025-08-26 14:15 UTC
Last updated2026-08-20 15:15 UTC
Channel statusauto

Summary

n8n-workflows Main Commit ee25413 allows attackers to execute a directory traversal via the download_workflow function within api_server.py

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

  • :

Sources

  • NVD DATABASE

Original Links

Timeline

  1. nvd_ingest NVD