CVE-2025-49592

n8n is a workflow automation platform. Versions prior to 1.98.0 have an Open Redirect vulnerability in the login flow. Authenticated users can be redirected to untrusted, attacker-controlled domains after logging in, by crafting malicious URLs with a misleading redirect query parameter. This may lead to phishing attacks by impersonating the n8n UI on lookalike domains (e.g., n8n.local.evil.com), credential or 2FA theft if users are tricked into re-entering sensitive information, and/or reputation risk due to the visual similarity between attacker-controlled domains and trusted ones. The vulnerability affects anyone hosting n8n and exposing the `/signin` endpoint to users. The issue has been patched in version 1.98.0. All users should upgrade to this version or later. The fix introduces strict origin validation for redirect URLs, ensuring only same-origin or relative paths are allowed after login.

• CWE-601

• https://github.com/n8n-io/n8n/commit/4865d1e360a0fe7b045e295b5e1a29daad12314ePatch
• https://github.com/n8n-io/n8n/pull/16034Patch
• https://github.com/n8n-io/n8n/releases/tag/n8n%401.98.0Release Notes
• https://github.com/n8n-io/n8n/security/advisories/GHSA-5vj6-wjr7-5v9fVendor Advisory

Published

Jun 26, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-49586XWiki is an open-source wiki software platform. Any XWiki us…8.8
• CVE-2025-49587XWiki is an open-source wiki software platform. When a user …8
• CVE-2025-49588Linkwarden is a self-hosted, open-source collaborative bookm…8.7
• CVE-2025-49589PCSX2 is a free and open-source PlayStation 2 (PS2) emulator…6.1
• CVE-2025-49590CryptPad is a collaboration suite. Prior to version 2025.3.0…6.1
• CVE-2025-49591CryptPad is a collaboration suite. Prior to version 2025.3.0…9.1
• CVE-2025-49593Portainer Community Edition is a lightweight service deliver…6.8
• CVE-2025-49594XWiki OIDC has various tools to manipulate OpenID Connect pr…9.2
• CVE-2025-49595n8n is a workflow automation platform. Prior to version 1.99…4.9
• CVE-2025-49596The MCP inspector is a developer tool for testing and debugg…9.4
• CVE-2025-49597handcraftedinthealps goodby-csv is a highly memory efficient…3.9
• CVE-2025-49598conda-forge-ci-setup is a package installed by conda-forge e…4.4