Symlink Traversal Vulnerability in n8n Workflow Automation Platform

CVE-2025-57749

What is CVE-2025-57749?

n8n, a popular workflow automation platform, has a symlink traversal vulnerability impacting versions earlier than 1.106.0. This flaw resides in the Read/Write File node, where attempts to restrict access to sensitive directories fail due to improper handling of symbolic links. An attacker capable of creating symlinks via the Execute Command node may exploit this vulnerability to bypass directory restrictions, potentially gaining access to read from or write to protected files. Users leveraging n8n.cloud services are not at risk, and those affected are advised to upgrade to version 1.106.0 or newer.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References