CVE-2025-52554

Name: CVE-2025-52554
Creator: NVD / NIST
Published: 2025-07-03T20:15:23.423+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

MEDIUMCVSS 4.9/10EPSS 0.27%

Last modified Jun 17, 2026

CVE-2025-52554 is a medium-severity vulnerability rated 4.9/10 on the CVSS scale. n8n is a workflow automation platform. Prior to version 1.99.1, an authorization vulnerability was discovered in the /rest/executions/:id/stop endpoint of n8n. EPSS estimates a 0.27% chance of exploitation in the next 30 days.

Description

n8n is a workflow automation platform. Prior to version 1.99.1, an authorization vulnerability was discovered in the /rest/executions/:id/stop endpoint of n8n. An authenticated user can stop workflow executions that they do not own or that have not been shared with them, leading to potential business disruption. This issue has been patched in version 1.99.1. A workaround involves restricting access to the /rest/executions/:id/stop endpoint via reverse proxy or API gateway.

Metrics

CVSS 3.1

4.3/10

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CVSS 4.0

4.9/10

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS Probability

0.27%

18.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-862

Affected Software

Vendor	Product	Versions
N8n	N8n	< 1.99.1

References

https://github.com/dudanogueira/n8n/commit/ca2f90c7fbaa1d661ade2f45d587d9469bc287e1Patch
https://github.com/n8n-io/n8n/commit/e5edc60e344924230baafb11fa1f0af788e9ca9aPatch
https://github.com/n8n-io/n8n/pull/16405Issue Tracking, Patch
https://github.com/n8n-io/n8n/security/advisories/GHSA-gq57-v332-7666Issue Tracking, Patch, Third Party Advisory

Timeline

Published: Jul 3, 2025
Last Modified: Jun 17, 2026
Status: Analyzed

Frequently Asked Questions

What is CVE-2025-52554?

How severe is CVE-2025-52554?

CVE-2025-52554 has a CVSS score of 4.9/10 (MEDIUM severity). The EPSS model estimates a 0.27% probability of exploitation in the next 30 days.

How do I fix CVE-2025-52554?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2025-52554?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST