The n8n package 0.218.0 for Node.js allows Directory Traversal.
Priority MEDIUM 62CWE-22Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and GitHub. Impact type from CWE-22 and the CVSS impact.
Summary
The n8n package 0.218.0 for Node.js allows Directory Traversal.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.02316 83rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed n8n (npm): 0.216.1
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
| — | n8n (npm) | before 0.216.1 | 0.216.1 | Patch available | GHSA-p58x-7733-vp9m |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
- n8n (npm) Vendor— Affected before 0.216.1 Fixed in 0.216.1 Patch available GHSA-p58x-7733-vp9m
Remediation
- Fix · GHSA-p58x-7733-vp9m n8n (npm) Fixed in 0.216.1 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2023-27562
- 2026-10-03 Alias added: GHSA-p58x-7733-vp9m
References
Exploit 1
Other 9
- https://github.com/n8n-io/n8n/releases
- https://security.netapp.com/advisory/ntap-20230622-0007/
- https://github.com/n8n-io/n8n/pull/5522
- https://github.com/n8n-io/n8n/pull/5523
- https://github.com/n8n-io/n8n/commit/40b97846483fe7c58229c156acb66f43a5a79dc3
- https://github.com/n8n-io/n8n/commit/fb07d77106bb4933758c63bbfb87f591bf4a27dd
- https://github.com/n8n-io/n8n
- https://github.com/n8n-io/n8n/releases/tag/n8n%400.216.1
- https://security.netapp.com/advisory/ntap-20230622-0007
More N8n vulnerabilities
- TI-2025-42131 n8n Vulnerable to Remote Code Execution via Expression Injection KEVCVSS 3.1CRITICAL 10.0
- TI-2026-17560 n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling CVSS 3.1CRITICAL 10.0
- TI-2026-01167 Authenticated users can bypass the Expression sandbox mechanism to achieve full remote… CVSS 3.1CRITICAL 9.9
- TI-2026-00644 Sandbox escape in n8n Python task runner allows for arbitrary code execution on the underlying host. CVSS 3.1CRITICAL 9.9
- TI-2025-35293 An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3… CVSS 3.1HIGH 8.8
- TI-2023-12275 The n8n package 0.218.0 for Node.js allows Escalation of Privileges. CVSS 3.1HIGH 8.8
Sources
- CVE-2023-27562 · CVE Program
- CVE-2023-27562 · NVD
- FIRST EPSS
- GHSA-p58x-7733-vp9m · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences