CNNVD-202507-320 Information

CNNVD ID

CNNVD-202507-320

CVE-2025-52554

  • CNNVD Published: 2025-07-03

Description (Chinese)

n8n是n8n开源的一个可扩展的工作流自动化工具。 n8n 1.99.1之前版本存在安全漏洞,该漏洞源于/rest/executions/:id/stop端点存在授权漏洞,可能导致业务中断。

Description (English)

n8n is an expanded workflow automation tool for n8n open source. n8n 1.99.1 has a security loophole that stems from a mandate gap at the /rest/executions/id/stop endpoint, which could lead to disruption of operations.

Hazard Level

Critical

Vulnerability Type

其他

Affected Vendor

n8n

Published

2025-07-03

Last Modified

2026-02-24

References

https://github.com/dudanogueira/n8n/commit/ca2f90c7fbaa1d661ade2f45d587d9469bc287e1 https://github.com/n8n-io/n8n/commit/e5edc60e344924230baafb11fa1f0af788e9ca9a https://github.com/n8n-io/n8n/pull/16405 https://github.com/n8n-io/n8n/security/advisories/GHSA-gq57-v332-7666

Patch

https://github.com/n8n-io/n8n/releases

Share on: