Executive brief
n8n is a popular workflow automation platform that allows users to build complex integrations and automations. The vulnerability allows unauthenticated attackers to access sensitive information by bypassing authentication controls on URLs containing SVG file extensions, potentially exposing confidential workflow data and configuration details without requiring valid credentials.
Technical details
n8n prior to version 0.216.1 contains an improper authentication bypass vulnerability (CWE-668) where the authentication mechanism was explicitly bypassed for URLs containing the `.svg` extension. This allowed unauthenticated network access to retrieve sensitive information that should require valid authentication credentials. The vulnerability was patched in commit 27adea70459329fc0dddabee69e10c9d1453835f by removing the overly broad SVG-specific auth bypass rule. No special preconditions or user interaction are required—an attacker can directly access vulnerable endpoints over the network.
Affected products
- n8n n8n before 0.216.1
Timeline
- 2023-05-10: disclosed: Vulnerability published
- 2023-02-21: patched: Fix merged in PR #5525
- 2023-05-10: advisory