CVE-2025-49595 json
n8n Vulnerable to Denial of Service via Malformed Binary Data Requests
published 2025-07-03 16 mo ago modified 2026-06-17 4 mo ago also EUVD-2025-19862 , GHSA-pr9r-gxgp-9rm8
- cvss
- 4.9
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.5%
- EPSS 0.5% chance of exploitation in 30 days, percentile 41%
- public exploits
- 0
- none known
Summary
n8n is a workflow automation platform. Prior to version 1.99.0, there is a denial of Service vulnerability in /rest/binary-data endpoint when processing empty filesystem URIs (filesystem:// or filesystem-v2://). This allows authenticated attackers to cause service unavailability through malformed filesystem URI requests, effecting the /rest/binary-data endpoint and n8n.cloud instances (confirmed HTTP/2 524 timeout responses). Attackers can exploit this by sending GET requests with empty filesystem URIs (filesystem:// or filesystem-v2://) to the /rest/binary-data endpoint, causing resource exhaustion and service disruption. This issue has been patched in version 1.99.0.
Patch / fix
- npm n8n 1.99.0
- n8n n8n 1.99.0
- github.com/n8n-io/n8n@43c52a8 commit
- github.com/n8n-io/n8n#16229 pull request
- github.com/n8n-io/n8n/security/advisories/GHSA-pr9r-gxgp-9rm8 advisory
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 16 mo ago
Exploit prediction
0.47% chance of exploitation in the next 30 days, higher than 41% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 4.9 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H |
| GitHub | 3.1 | 4.9 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| npm | n8n | <1.99.0 |
1.99.0 |
Affected products
- n8n-io n8n
Classification
- Weakness
-
- CWE-400 Uncontrolled Resource Consumption
References
-
github.com
/n8n-io/n8n/pull/16229
web, patch
-
github.com
/n8n-io/n8n/commit/43c52a8b4f844e91b02e3cc9df92826a2d7b6052
web, patch
-
github.com
/n8n-io/n8n/security/advisories/GHSA-pr9r-gxgp-9rm8
web, patch, third-party-advisory
-
nvd.nist.gov
/vuln/detail/CVE-2025-49595
advisory
-
github.com
/n8n-io/n8n
package
Sources
- CVE List CVE-2025-49595
- GitHub Advisory GHSA-pr9r-gxgp-9rm8
- NVD CVE-2025-49595
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.