Intel

AIKIDO-2025-10378

n8n is vulnerable to Denial of Service (DoS)

Denial of Service (DoS) Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Jun 16, 2025

15

Low Risk

This Affects:

JSn8n
1.11.0 - 1.98.1
Fixed in 1.99.0
Are you affected? Scan for Free

TL;DR

Affected versions of the package are vulnerable to Denial of Service (DoS). Malformed binary data IDs such as filesystem-v2:// or filesystem: are not properly rejected, causing the system to perform costly metadata lookups on the binary data root directory. This can be exploited by an attacker to exhaust resources and degrade performance.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

n8n is vulnerable to Denial of Service (DoS) in versions 1.11.0 - 1.98.1.

How to fix this

Upgrade the n8n library to the patch version.