{"data":{"id":"aca5fa45-1560-45c2-ac7c-9f353bcc068e","title":"GHSA-2vx9-7wpg-88jq: n8n: Legacy ExecuteWorkflow Node Bypassed File Path Restrictions","summary":"The ExecuteWorkflow node's legacy localFile source option read workflow files from disk without the checks other file-reading nodes apply, letting an authenticated user with workflow create or modify permission supply arbitrary paths through the REST API and bypass N8N_RESTRICT_FILE_ACCESS_TO. The flaw lets an attacker probe whether arbitrary files exist on the host, and a valid workflow JSON file at the path could be loaded and executed, potentially triggering actions on connected downstream systems. The option is hidden from the UI since v1.2 but remains reachable via the API.","solution":"Fixed in n8n 2.20.0 or 2.19.3; upgrade to these or later. If upgrading is not immediately possible, restrict workflow creation and editing permissions to fully trusted users only and restrict network access to the n8n REST API to trusted users only. The source states these workarounds do not fully remediate the risk and are short-term measures only.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-2vx9-7wpg-88jq","publishedAt":"2026-05-19T15:55:43.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["n8n@< 2.19.3 (fixed: 2.19.3)"],"affectedPackageNames":["n8n"],"affectedPackageRefs":["npm:n8n"],"affectedVendors":[],"affectedVendorsRaw":["n8n"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-2vx9-7wpg-88jq"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-19T15:55:43.000Z","fixReleasedAt":"2026-05-06T10:43:57.654Z","daysToFix":-13,"fixCheckedAt":"2026-10-29T21:35:45.719Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.7,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"n8n","fixedVersion":"2.19.3","matchedVersion":"2.19.3","fixReleasedAt":"2026-05-06T10:43:57.654Z","daysToFix":-13,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:35:45.567Z"}]}}