p PatchFirst

CVE-2025-52554

CVE-2025-52554 · n8n Improper Authorization in Workflow Execution Stop Endpoint Allows Terminating Other Users’ Workflows

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

n8n is a workflow automation platform. Prior to version 1.99.1, an authorization vulnerability was discovered in the /rest/executions/:id/stop endpoint of n8n. An authenticated user can stop workflow executions that they do not own or that have not been shared with them, leading to potential business disruption. This issue has been patched in version 1.99.1. A workaround involves restricting access to the /rest/executions/:id/stop endpoint via reverse proxy or API gateway.

CVSS 4.9 · Moyenne · EPSS 0,4% · Correctif disponible

Publication
Mise à jour

Pile logicielle: node

Produits et versions concernés

  • n8n

    Versions du logiciel
    • < 1.99.1: Concernée

    Aucun correctif publié

  • n8n npm

    Plages de versions concernées
    • SEMVER: < 1.99.1

    Mettez à jour vers 1.99.1

Sources originales

Vérifiez votre serveur →