CVE-2025-49595 - CVE House

Back to Database

Status published Medium CVE-2025-49595

n8n Vulnerable to Denial of Service via Malformed Binary Data Requests

4.9 CVSS

Vulnerability Description

n8n is a workflow automation platform. Prior to version 1.99.0, there is a denial of Service vulnerability in /rest/binary-data endpoint when processing empty filesystem URIs (filesystem:// or filesystem-v2://). This allows authenticated attackers to cause service unavailability through malformed filesystem URI requests, effecting the /rest/binary-data endpoint and n8n.cloud instances (confirmed HTTP/2 524 timeout responses). Attackers can exploit this by sending GET requests with empty filesystem URIs (filesystem:// or filesystem-v2://) to the /rest/binary-data endpoint, causing resource exhaustion and service disruption. This issue has been patched in version 1.99.0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-49595

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from n8n-io

View All →

n8n has a Webhook Node IP Whitelist Bypass via Partial String Matching

Self-hosted n8n has Legacy Code node that enables arbitrary file read/write

n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node

n8n Vulnerable to Remote Code Execution via Expression Injection

n8n Vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook

Affected Vendor

n8n-io

View all reports →

Affected Software

n8n

Vulnerable Versions:

< 1.99.0

Timeline

Official Publish: July 3rd, 2025

Last Modified: July 3rd, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service

T1498 Network Denial of Service