Executive brief
n8n is a workflow automation platform that allows users to connect and automate various applications and services. A directory traversal vulnerability in the credential-translation endpoint could allow authenticated users to access sensitive files and configuration data outside of intended directories, potentially exposing credentials, private keys, or other confidential information stored on the server.
Technical details
This is a CWE-22 directory traversal vulnerability in n8n's credential-translation endpoint. The endpoint failed to properly validate user-supplied file paths, allowing an authenticated attacker to use path traversal sequences (e.g., ../) to access arbitrary files on the server. The vulnerability requires authentication (PR:L) and network access. An attacker with valid credentials can read sensitive files such as configuration files, private keys, or other secrets. The vulnerability was patched in version 0.216.1 via commits that implement proper path validation in the credential-translation endpoint.
Affected products
- n8n n8n prior to 0.216.1
Timeline
- 2023-05-10: disclosed
- 2023-05-10: patched: Fixed in version 0.216.1