Description
Node.js N8n Package存在目录遍历漏洞，此漏洞是由于rest接口对用户的请求验证不当导致的。
Node.js N8n Package rest 目录遍历漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://security.snyk.io/vuln/SNYK-JS-N8N-5518109
https://github.com/n8n-io/n8n/security/advisories/GHSA-2vx9-7wpg-88jq
https://www.synacktiv.com/sites/default/files/2023-05/Synacktiv-N8N-Multiple-Vulnerabilities_0.pdf
https://feedly.com/cve/CVE-2023-27562
https://www.twcert.org.tw/tw/cp-104-10688-91d6d-1.html
https://hakaisecurity.io/en-n8naked-exploring-security-misconfigurations-in-n8n/research-blog/
https://www.resecurity.com/blog/article/cve-2025-68613-remote-code-execution-via-expression-injection-in-n8n-2