What is the CVSS score of CVE-2026-25052?

CVE-2026-25052 has a CVSS 3.1 base score of 9.9 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of AI / ML are affected by CVE-2026-25052?

A critical vulnerability in n8n workflow automation platform allows authenticated users to read sensitive files from the host system, potentially exposing credentials, configuration data, and other…. A patch is available.

How to fix or mitigate CVE-2026-25052?

Within 24 hours: Identify all n8n instances in your environment and document current versions. Within 7 days: Apply vendor patches (upgrade to version 1.123.18 or 2.5.0+) to all n8n deployments. Within 30 days: Conduct audit of workflow access logs to detect unauthorized file access attempts; review and restrict workflow creation permissions to essential personnel only.

AI / ML CVE-2026-25052

CRITICAL

Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)

2026-02-04 security-advisories@github.com

GHSA-gfvg-qv54-r4pc

Information Disclosure AI / ML N8n

9.9

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

9.9 CRITICAL

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

Patch released

Feb 05, 2026 - 20:32 nvd

Patch available

CVE Published

Feb 04, 2026 - 17:16 nvd

CRITICAL 9.9

DescriptionGitHub Advisory

n8n is an open source workflow automation platform. Prior to versions 1.123.18 and 2.5.0, a vulnerability in the file access controls allows authenticated users with permission to create or modify workflows to read sensitive files from the n8n host system. This can be exploited to obtain critical configuration data and user credentials, leading to complete account takeover of any user on the instance. This issue has been patched in versions 1.123.18 and 2.5.0.

AnalysisAI

n8n has a TOCTOU race condition vulnerability (CVSS 9.9) enabling bypass of execution restrictions in workflow processing.

Technical ContextAI

n8n < 1.123.18 / 2.5.0 has a CWE-367 time-of-check time-of-use race condition that allows attackers to modify workflow execution between validation and execution phases.