{"data":{"id":"c7a0cdad-c775-4dde-9901-d855691570db","title":"GHSA-w867-jm58-p9pv: n8n: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads","summary":"In n8n (a workflow automation tool), authenticated users can upload files repeatedly to bypass upload limits, causing temporary files to pile up on the server's disk until the automatic cleanup runs, potentially filling the disk completely. This happens because the system doesn't properly track files already stored in the shared temporary directory.","solution":"Users should upgrade to the patched version once available. If upgrading immediately is not possible, administrators can temporarily: restrict n8n access to fully trusted users only, set `uploadMaxFileSize` to a low value to limit individual upload size, and monitor and alert on disk usage in the n8n temporary upload directory. The source notes these workarounds do not fully remediate the risk and should only be used as short-term measures.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-w867-jm58-p9pv","publishedAt":"2026-07-22T22:25:45.000Z","cveId":"CVE-2026-58661","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":["n8n@< 1.123.58 (fixed: 1.123.58)","n8n@>= 2.0.0, < 2.28.0 (fixed: 2.28.0)"],"affectedVendors":[],"affectedVendorsRaw":["n8n"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00225,"patchAvailable":true,"disclosureDate":"2026-07-22T22:25:45.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}