CVE-2026-58661

MediumCVSS 4.3/10Last modified Oct 29, 2026

Description

n8n before 2.28.0 (and before 1.123.58 on the 1.x branch) contains a disk space exhaustion vulnerability in the data-table file upload endpoint. The per-request quota check does not account for files already written to the shared temporary directory, allowing an authenticated user to repeatedly upload files that accumulate on disk until the periodic cleanup runs, potentially exhausting available disk space on the host.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-770

Affected software

VendorProductVersions
n8nn8n>= 2.0.0, < 2.28.0
n8nn8n< 1.123.58

References

Timeline

Published
Jul 10, 2026
Last modified
Oct 29, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-586629.1Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrift C++ bindings. This issue affects ApacCVE-2026-586639.8An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: from 2.0.0 before 2.0CVE-2026-58674.3Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information CVE-2026-586776.8In get_secure_boot_mode of auth.rs, there is a possible way to bypass root signature verification via fault injection due to a logic error. CVE-2026-586787.8In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege withCVE-2026-586798.4In gf_ta_test_set_config of gf_ta_test.c, there is a possible heap buffer overflow due to a logic error in the code. This could lead to locaCVE-2026-58688.8Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a saCVE-2026-586806.7In cpm_mbox_power_ctrl_sswrp of cpm_mbox.c, there is a possible permission bypass due to a precondition check failure. This could lead to loCVE-2026-586819.8In multiple locations, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution with no CVE-2026-586838.8In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code executiCVE-2026-586848.4In smmu_config_l3tt of smmu.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation oCVE-2026-58694.3Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information
CVE-2026-58661: Medium severity, CVSS 4.3 | Vulnix