Threats tagged 'ghsa-2vww-6p9h-5g8j'

CVE-2026-58661 affects n8n versions before 2.28.0 and before 1.123.58 on the 1.x branch. Authenticated users can exploit a flaw in the data-table file upload endpoint to exhaust disk space by repeatedly uploading files. The vulnerability exists because the quota check does not account for files already stored in the shared temporary directory, allowing accumulation until periodic cleanup. This can cause the host system's disk space to be fully consumed.