# CVE-2026-118646: n8n glob pattern regular expression denial of service

Source: https://junglewise.ai/threats/cve-2026-118646-n8n-before-1-123-85-2-43-5-and-2-44-1-contains-a-regular  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-28. Updated: 2026-10-28  
License: CC BY 4.0 with a link back

CVE-2026-118646 · Severity: medium · CVSS 6.5 · Published 2026-10-28

n8n is an open-source workflow automation platform that allows users to create and run automated tasks. The Read/Write Files node contains a regular expression denial of service vulnerability that allows authenticated users to craft wildcard-heavy file selectors that cause the entire n8n process to hang, making the UI, API, and webhooks unresponsive until the service is manually restarted.

Technologies: [N8n](https://junglewise.ai/threats/technologies/n8n). Vendors: [N8n](https://junglewise.ai/threats/vendors/n8n).

## Quick answers

**Is CVE-2026-118646 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-118646 being exploited in the wild.

**How severe is CVE-2026-118646?** Medium severity, with a CVSS score of 6.5, published 28 October 2026.

**Which products and versions are affected?** N8n before 1.123.85, 2.43.5, and 2.44.1.

**Is there a fix for CVE-2026-118646?** Yes: fixed in 1.123.85, 2.43.5, 2.44.1. Until then: Restrict n8n instance access to fully trusted users only, or disable the Read/Write Files node by adding n8n-nodes-base.readWriteFile to the NODES_EXCLUDE environment variable if it is not required. Audit existing workflows for Read/Write Files nodes with unusual File(s) Selector values.</anigation>
<parameter name="timeline">[{"kind":"disclosed","at":"2026-10-14"},{"kind":"advisory","at":"2026-10-28"}] Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-118646 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-118646?** Check whether you run N8n at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in 1.123.85, 2.43.5, 2.44.1

Restrict n8n instance access to fully trusted users only, or disable the Read/Write Files node by adding n8n-nodes-base.readWriteFile to the NODES_EXCLUDE environment variable if it is not required. Audit existing workflows for Read/Write Files nodes with unusual File(s) Selector values.</anigation>
<parameter name="timeline">[{"kind":"disclosed","at":"2026-10-14"},{"kind":"advisory","at":"2026-10-28"}]

## Technical details

The vulnerability exists in the Read/Write Files from Disk node, which evaluates glob patterns on the main event loop without time limits. Glob patterns containing many wildcards compile to regular expressions with exponential backtracking, allowing an authenticated user to block the event loop indefinitely. Attackers with workflow creation and execution permissions can exploit this to cause denial of service affecting all users of the instance.

## Affected products

- n8n n8n before 1.123.85, 2.43.5, and 2.44.1

## References

- [https://github.com/n8n-io/n8n/security/advisories/GHSA-m7gv-mpg5-7c9v](https://github.com/n8n-io/n8n/security/advisories/GHSA-m7gv-mpg5-7c9v)
- [https://www.vulncheck.com/advisories/n8n-before-1.123.85-2.43.5-and-2.44.1-redos-via-read-write-files-node](https://www.vulncheck.com/advisories/n8n-before-1.123.85-2.43.5-and-2.44.1-redos-via-read-write-files-node)

## Related threats

- [n8n path traversal in Databricks node](https://junglewise.ai/threats/cve-2026-119557-n8n-from-2-14-0-through-2-46-3-contains-a-path-traversal)
- [n8n remote code execution in deprecated Function nodes](https://junglewise.ai/threats/cve-2026-119408-n8n-before-2-42-6-2-43-x-before-2-43-3-and-3-x-before-3-0-1)
- [n8n Slack Trigger SSRF and token exfiltration](https://junglewise.ai/threats/cve-2026-118679-n8n-before-1-123-83-2-41-4-and-2-42-1-contains-a-server-side)
- [n8n prototype pollution in workflow history compaction](https://junglewise.ai/threats/cve-2026-118678-n8n-before-2-41-4-and-2-42-x-before-2-42-1-contains-a-prototype)
- [n8n Local Gateway deep-link missing confirmation re-pairing](https://junglewise.ai/threats/cve-2026-118677-n8n-before-2-41-4-and-2-42-x-before-2-42-1-contains-a-missing)