CVE-2025-56265

PoC ×2—

CVSS 3.1

8.8 high

EPSS

<1%p47

Published

Sep 8, 2025 (Sep 8, 2025)

Modified

Jun 17, 2026

Description

An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.100.1, and v1.101.1 allows attackers to execute arbitrary code via uploading a crafted HTML file.

Vendors: n8n
Products: n8n
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.