Critical · published January 7, 2026
CVSS calls it critical at 10.0. It sits in the 99.6th percentile for exploit probability.
🚨 A crafty workflow is all it takes! Unauthenticated attackers can exploit poorly secured n8n workflows to access sensitive server files — yikes! 🔥 Think of it like an overshared menu at a restaurant; if the server hands it out without checking who’s at the table, anyone can peek at the secret recipes behind the kitchen doors! This vulnerability could lead to an attacker gaining unauthorized access to sensitive information stored on the server, potentially exposing everything from private user data to critical configuration files. If they find a way to manipulate the workflow further, the consequences could be absolutely devastating!
Think of it like an overshared menu at a restaurant; if the server hands it out without checking who’s at the table, anyone can peek at the secret recipes behind the kitchen doors! Versions of n8n from 1.65.0 up to 1.121.0 allow remote attackers to access server files via specific form-based workflows, compromising the security of the installation without any authentication requirement.
This vulnerability could lead to an attacker gaining unauthorized access to sensitive information stored on the server, potentially exposing everything from private user data to critical configuration files. If they find a way to manipulate the workflow further, the consequences could be absolutely devastating! Immediately upgrade your n8n installation to version 1.121.0 to close this critical vulnerability. If you’re using older workflows, review and secure them to prevent unauthorized access in the future. Don't forget to audit your server settings regularly! You’ve got this! Fixing this issue is straightforward, and soon your n8n setup will be totally secure! 🛡️