GHSA-2vww-6p9h-5g8j
n8n versions before 2.28.0 and before 1.123.58 on the 1.x branch have a disk space exhaustion vulnerability in the data-table file upload endpoint. The vulnerability arises because the per-request quota check does not consider files already stored in the shared temporary directory. This allows an authenticated user to repeatedly upload files that accumulate until periodic cleanup occurs, potentially exhausting disk space on the host system.
AI Analysis
Technical Summary
The vulnerability in n8n prior to versions 2.28.0 and 1.123.58 (1.x branch) involves improper quota enforcement on the data-table file upload endpoint. Specifically, the quota check only accounts for the size of the current request's files and ignores files already present in the shared temporary directory. Consequently, an authenticated user can repeatedly upload files that accumulate on disk, leading to disk space exhaustion until the periodic cleanup process removes them. This is classified as CWE-770 (Allocation of Resources Without Limits or Throttling).
Potential Impact
An authenticated user can cause denial of service by exhausting the disk space on the host running n8n. This may disrupt normal operations or cause failures in the application or host system due to lack of available storage. There is no indication of remote code execution or data leakage from this vulnerability.
Mitigation Recommendations
A fix is available in n8n versions 2.28.0 and 1.123.58 (1.x branch) that addresses this issue. Users should upgrade to these or later versions to remediate the vulnerability. Since no vendor advisory or patch links are provided in the input, verify the patch status with the official n8n release notes or security advisories before applying. Until patched, limit authenticated user file upload permissions or monitor disk usage to mitigate impact.
GHSA-2vww-6p9h-5g8j
Description
n8n versions before 2.28.0 and before 1.123.58 on the 1.x branch have a disk space exhaustion vulnerability in the data-table file upload endpoint. The vulnerability arises because the per-request quota check does not consider files already stored in the shared temporary directory. This allows an authenticated user to repeatedly upload files that accumulate until periodic cleanup occurs, potentially exhausting disk space on the host system.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in n8n prior to versions 2.28.0 and 1.123.58 (1.x branch) involves improper quota enforcement on the data-table file upload endpoint. Specifically, the quota check only accounts for the size of the current request's files and ignores files already present in the shared temporary directory. Consequently, an authenticated user can repeatedly upload files that accumulate on disk, leading to disk space exhaustion until the periodic cleanup process removes them. This is classified as CWE-770 (Allocation of Resources Without Limits or Throttling).
Potential Impact
An authenticated user can cause denial of service by exhausting the disk space on the host running n8n. This may disrupt normal operations or cause failures in the application or host system due to lack of available storage. There is no indication of remote code execution or data leakage from this vulnerability.
Mitigation Recommendations
A fix is available in n8n versions 2.28.0 and 1.123.58 (1.x branch) that addresses this issue. Users should upgrade to these or later versions to remediate the vulnerability. Since no vendor advisory or patch links are provided in the input, verify the patch status with the official n8n release notes or security advisories before applying. Until patched, limit authenticated user file upload permissions or monitor disk usage to mitigate impact.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-2vww-6p9h-5g8j
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-58661"]
- Ecosystems
- []
- Database Specific Severity
- MODERATE
- Cvss Version
- 4.0
Threat ID: 6a520eec68715ace4391d59c
Added to database: 07/11/2026, 09:37:48 UTC
Last enriched: 07/11/2026, 10:08:59 UTC
Last updated: 07/11/2026, 19:47:32 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.