CVE-2025-55526

CriticalCVSS 9.1/10Last modified Aug 20, 2026

Description

n8n-workflows Main Commit ee25413 allows attackers to execute a directory traversal via the download_workflow function within api_server.py

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published
Aug 26, 2025
Last modified
Aug 20, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-55539.8A vulnerability classified as critical was found in PHPGurukul Rail Pass Management System 1.0. Affected by this vulnerability is an unknownCVE-2025-55548.8A vulnerability, which was classified as critical, has been found in PHPGurukul Rail Pass Management System 1.0. Affected by this issue is sCVE-2025-55557.8A vulnerability has been found in Nixdorf Wincor PORT IO Driver up to 1.0.0.1. This affects the function sub_11100 in the library wnport.sysCVE-2025-555517.5An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operCVE-2025-555527.5pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are used together.CVE-2025-555537.5A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS).CVE-2025-555545.3pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long().CVE-2025-555566.5TensorFlow v2.18.0 was discovered to output random results when compiling Embedding, leading to unexpected behavior in the application.CVE-2025-555577.5A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of ServCVE-2025-555587.5A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.TensoCVE-2025-555597.5An issue was discovered TensorFlow v2.18.0. A Denial of Service (DoS) occurs when padding is set to 'valid' in tf.keras.layers.Conv2D.CVE-2025-55568.8A vulnerability, which was classified as critical, was found in PHPGurukul Teacher Subject Allocation Management System 1.0. This affects an
CVE-2025-55526: Critical severity, CVSS 9.1 | Vulnix