CVE-2026-58661 | n8n before 2.28.0 (and before 1.123.58 on the 1.x branch) co… | CVSS 5.3 MEDIUM

Description

n8n before 2.28.0 (and before 1.123.58 on the 1.x branch) contains a disk space exhaustion vulnerability in the data-table file upload endpoint. The per-request quota check does not account for files already written to the shared temporary directory, allowing an authenticated user to repeatedly upload files that accumulate on disk until the periodic cleanup runs, potentially exhausting available disk space on the host.

Metadata

CVE ID: CVE-2026-58661
State: PUBLISHED
Assigner: VulnCheck
Reserved: 2026-07-01 21:54 UTC
Published: 2026-07-10 13:58 UTC
Last updated: 2026-07-10 16:43 UTC
Primary CWE: CWE-770
Allocation of Resources Without Limits or Throttling
Vendor / Product: n8n / n8n
Sources: cve.org · NVD

Severity & Metrics

5.3 MEDIUM CVSS 4.0

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

SSVC — CISA Coordinator

Exploitation: none
Automatable: no
Tech. Impact: partial

Affected products (2)

Vendor	Product	Platform	Versions
n8n	n8n	—	0 < 2.28.0, 2.28.0
n8n	n8n	—	0 < 1.123.58, 1.123.58

Weakness (CWE)

CWE	Source	Description
CWE-770	cna	Allocation of Resources Without Limits or Throttling

CVSS scores (1)

Score	Severity	Version	Source	Vector
5.3	MEDIUM	4.0	cna	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

References (2)

GitHub Security Advisory (GHSA-w867-jm58-p9pv) https://github.com/n8n-io/n8n/security/advisories/GHSA-w867-jm58-p9pv
VulnCheck Advisory: n8n - Disk Space Exhaustion via Data-Table File Upload Endpoint https://www.vulncheck.com/advisories/n8n-disk-space-exhaustion-via-data-table-file-upload-endpoint