PatchTheCVEn8n workflow collection vulnerabilities and fixes
Recent CVEs affecting n8n workflow collection, with upgrade or downgrade steps. 1 tracked.
Also searched as: n8nworkflowcollection.
n8n workflow collection has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-08-26. Highest priority: CVE-2025-55526 (score 56/100).
- CVE-2025-55526 CRITICAL 9.1 DOWNGRADE n8n-workflows Main Commit ee25413 allows attackers to execute a directory traversal via the download_workflow
FAQ
How do I fix n8n workflow collection vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is n8n workflow collection being exploited right now?
None of the tracked n8n workflow collection CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which n8n workflow collection CVE should I patch first?
CVE-2025-55526 currently ranks highest (56/100): n8n-workflows Main Commit ee25413 allows attackers to execute a directory traversal via the download_workflow .