Critical · published August 26, 2025
🚨 A crafty directory traversal bug lurking in n8n's workflows could let attackers peek into sensitive files — who knew the download_workflow function could be a backdoor? 🔥 Think of it like a delivery driver who follows a vague address and ends up opening the back door of a secure warehouse instead of the front — they could grab anything without raising alarms! This is absolutely devastating! An attacker could access and read any file on the server's filesystem, potentially exposing sensitive data or configuration files. The risks here are astronomical, as it could lead to full system compromise if critical data falls into the wrong hands.
Think of it like a delivery driver who follows a vague address and ends up opening the back door of a secure warehouse instead of the front — they could grab anything without raising alarms! This vulnerability allows for directory traversal via the download_workflow function in api_server.py, enabling attackers to gain unauthorized access to files beyond the intended directory, exploiting improper input validation.
This is absolutely devastating! An attacker could access and read any file on the server's filesystem, potentially exposing sensitive data or configuration files. The risks here are astronomical, as it could lead to full system compromise if critical data falls into the wrong hands. To protect your application, patch n8n-workflows to the latest version immediately. Review your access controls and input validation processes to ensure they restrict file access as intended. This is crucial to safeguard against possible exploits! You've got this! Follow these steps, and you'll have your system locked down tight in no time! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| zie619/n8n_workflow_collection | all versions | — |