CVE-2025-49595: n8n Vulnerable to Denial of Service via Malformed Binary Data Requests

July 3, 2025

Denial of Service vulnerability in /rest/binary-data endpoint when processing empty filesystem URIs (filesystem:// or filesystem-v2://).

References

github.com/advisories/GHSA-pr9r-gxgp-9rm8
github.com/n8n-io/n8n
github.com/n8n-io/n8n/commit/43c52a8b4f844e91b02e3cc9df92826a2d7b6052
github.com/n8n-io/n8n/pull/16229
github.com/n8n-io/n8n/security/advisories/GHSA-pr9r-gxgp-9rm8
nvd.nist.gov/vuln/detail/CVE-2025-49595

Code Behaviors & Features

Detect and mitigate CVE-2025-49595 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →