Security Advisory: Security Vulnerability in n8n Versions 1.65-1.120.66

Questions
,
1

Describe the problem/error/question

What is the error message (if any)?

Please share your workflow

(Select the nodes on your canvas and use the keyboard shortcuts CMD+C/CTRL+C and CMD+V/CTRL+V to copy and paste the workflow.)

Share the output returned by the last node

Information on your n8n setup

  • n8n version:
  • Database (default: SQLite):
  • n8n EXECUTIONS_PROCESS setting (default: own, main):
  • Running n8n via (Docker, npm, n8n cloud, desktop app):
  • Operating system:
2

It seems there’s a security vulnerability affecting n8n versions 1.65 to 1.120.6. Specifically, it involves workflows using the Form Submission trigger and a Form Ending node that returns a binary.

To address this, you should upgrade your n8n instance to the latest version. You can find the latest version and upgrade instructions on the n8n website or in the documentation.