{"id":"CVE-2026-118646","kind":"vulnerability","aliases":["CVE-2026-118646"],"related":[],"title":"n8n: crafted glob pattern lets a workflow member freeze the server","description":"n8n before 1.123.85, 2.43.5, and 2.44.1 contains a regular expression denial of service vulnerability that allows authenticated members to block the event loop via crafted glob patterns. Attackers who can create and run workflows can submit a wildcard-heavy File(s) Selector pattern causing exponential backtracking, making the UI, API, webhooks, and health checks unresponsive until restart.","summary":"n8n contains a regular expression denial of service flaw in its File(s) Selector glob handling. An authenticated member who can create and run workflows can submit a wildcard-heavy pattern that triggers exponential backtracking and blocks the event loop, making the UI, API, webhooks and health checks unresponsive until restart.","severity":"high","cvss":7.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-tooling","n8n","self-hosted","workflow-automation"],"not_affected_if":["patched-version","workflow-authors-trusted"],"how_to_check":"- Check the installed n8n version with `n8n --version` or the image tag in your deployment and compare against the fixed releases below.\n- Review which users hold workflow create and run permissions in your n8n instance.","fix":"- Upgrade n8n to `1.123.85` on the 1.x line, `2.43.5` on the 2.43 line, or `2.44.1` on the 2.44 line.","status":"open","published_at":"2026-10-28T19:17:32+00:00","first_seen_at":"2026-10-28T19:34:55+00:00","triaged_at":"2026-10-28T19:36:05+00:00","updated_at":"2026-10-28T19:36:05+00:00","category":"ai-tooling","confidence":0.7,"triage":{"at":"2026-10-28T19:36:05Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade n8n to `1.123.85` on the 1.x line, `2.43.5` on the 2.43 line, or `2.44.1` on the 2.44 line.","reach":"network","title":"n8n: crafted glob pattern lets a workflow member freeze the server","impact":"medium","summary":"n8n contains a regular expression denial of service flaw in its File(s) Selector glob handling. An authenticated member who can create and run workflows can submit a wildcard-heavy pattern that triggers exponential backtracking and blocks the event loop, making the UI, API, webhooks and health checks unresponsive until restart.","category":"ai-tooling","nicknames":[],"who_cares":["n8n","self-hosted","workflow-automation"],"confidence":0.7,"needs_auth":"yes","worst_case":"Server becomes unresponsive for all users until restarted","analyst_note":"","how_to_check":"- Check the installed n8n version with `n8n --version` or the image tag in your deployment and compare against the fixed releases below.\n- Review which users hold workflow create and run permissions in your n8n instance.","needs_analyst":false,"not_affected_if":["patched-version","workflow-authors-trusted"],"who_is_affected":"Self-hosted or cloud n8n instances on versions before the fixed releases are exposed when someone with an account can create and run workflows that use the File(s) Selector node. Instances where only trusted administrators can author workflows carry much less risk. unknown whether instances that never use the File(s) Selector node are exposed through other glob paths.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000622,"input_tokens":3360,"output_tokens":571,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-118646':14A,17A '-2026':13A,16A '1.123.85':82C '2.43.5':83C '2.44.1':85C 'ai':19B 'ai-tool':18B 'allow':95C 'api':72B,130C 'attack':107C 'authent':45B,96C 'autom':27B 'backtrack':63B,126C 'block':65B,99C 'caus':124C 'check':76B,134C 'contain':29B,86C 'craft':2A,104C 'creat':49B,110C 'cve':12A,15A 'denial':33B,90C 'event':67B,101C 'exponenti':62B,125C 'express':32B,89C 'file':39B,120C 'flaw':36B 'freez':9A 'glob':3A,42B,105C 'handl':43B 'health':75B,133C 'heavi':58B,119C 'host':24B 'let':5A 'loop':68B,102C 'make':69B,127C 'member':8A,46B,97C 'n8n':1A,21B,28B,80C 'pattern':4A,59B,106C,123C 'regular':31B,88C 'restart':79B,137C 'run':51B,112C 'selector':41B,122C 'self':23B 'self-host':22B 'server':11A 'servic':35B,92C 'submit':54B,115C 'tool':20B 'trigger':61B 'ui':71B,129C 'unrespons':77B,135C 'via':103C 'vulner':93C 'webhook':73B,131C 'wildcard':57B,118C 'wildcard-heavi':56B,117C 'workflow':7A,26B,52B,113C 'workflow-autom':25B","nicknames":[],"mitigations":[],"who_affected":"Self-hosted or cloud n8n instances on versions before the fixed releases are exposed when someone with an account can create and run workflows that use the File(s) Selector node. Instances where only trusted administrators can author workflows carry much less risk. unknown whether instances that never use the File(s) Selector node are exposed through other glob paths.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T19:17:32+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118646","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118646","severity":null,"published_at":"2026-10-28T19:17:32+00:00","modified_at":"2026-10-28T19:17:32+00:00","first_seen_at":"2026-10-28T19:34:55+00:00","fetched_at":"2026-10-28T19:34:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}