Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
n8n is an open source workflow automation platform. Prior to versions 1.123.18 and 2.5.0, a vulnerability in the file access controls allows authenticated users with permission to create or modify workflows to read sensitive files from the n8n host system. This can be exploited to obtain critical configuration data and user credentials, leading to complete account takeover of any user on the instance. This issue has been patched in versions 1.123.18 and 2.5.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-04 | 2 | Disclosure2 |
| 2026-02-05 | 1 | Disclosure1 |
| 2026-02-06 | 1 | Disclosure1 |
n8n is affected by an arbitrary file read vulnerability (CVE-2026-25052) for authenticated users. Upgrade to n8n version 2.5.0 for this #infosec #vulnerability remediation. https://www.pulsepatch.io/posts/cve-2026-25052-n8n-arbitrary-file-read-vulnerability
Post summary
n8n is vulnerable to an authenticated arbitrary file read flaw (CVE‑2026‑25052); users should upgrade to v2.5.0 to remediate the issue.
🔴 CVE-2026-25052 - Critical n8n is an open source workflow automation platform. Prior to versions 1.123.18 and 2.5.0, a vulnerability in the file access controls allows authenticated users with permission to create ... https://www.thehackerwire.com/vulnerability/CVE-2026-25052/ https://t.co/zYXvlWKWrE
Post summary
The tweet highlights CVE-2026-25052 as a critical vulnerability in n8n’s file access controls and directs readers to an external article, but it provides no evidence of exploitation, patches, or PoC.
CVE-2026-25052 Authenticated File Read Vulnerability in n8n Workflow Automation Platform https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25052
Post summary
The text announces CVE-2026-25052 as an authenticated file read vulnerability in n8n Workflow Automation Platform, but provides no PoC, exploit details, patch information, or evidence of active exploitation.
CVE-2026-25052 n8n is an open source workflow automation platform. Prior to versions 1.123.18 and 2.5.0, a vulnerability in the file access controls allows authenticated users with … https://www.cve.org/CVERecord?id=CVE-2026-25052
Post summary
The text discloses CVE‑2026‑25052, noting an authenticated file‑access control flaw in n8n before versions 1.123.18 and 2.5.0, and links to the official CVE record.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | n8n | n8n | - | node.js | - |