Vulnerability in N8n-io N8n
CVE-2026-54314
n8n is an open source workflow automation platform. Prior to 2.24.0, the Compression node's Decompress operation expanded attacker-controlled archives into memory without enforcing limits on decompressed output size. An unauthenticated att…
Affected products
- N8n-io N8n — versions < 2.24.0
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)