CyberRota Analysis
AI-GeneratedThe vulnerability affects n8n versions prior to 2.33.4 and 2.34.x before 2.34.1, allowing authenticated users with global:member privileges to exploit the node-schema loader in the @n8n/workflow-sdk. By leveraging path traversal techniques, an attacker can execute arbitrary code within the n8n main process, posing a significant security risk. Organizations using n8n should prioritize patching to mitigate potential remote code execution threats.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
n8n before 2.33.4 and 2.34.x before 2.34.1 contain a remote code execution vulnerability in the @n8n/workflow-sdk node-schema loader used for MCP node-schema loading. The loader derives a node's schema module path directly from the attacker-supplied node type string without validating path-traversal sequences. An authenticated user with global:member privileges can reference malicious files via path traversal, causing code execution in the n8n main process.
Related CVEs
Other vulnerabilities affecting the same vendor(s)