CVE-2025-49592— n8n Login Flow has Open Redirect Vulnerability
Quick assessment
Affected
n8n-io n8n
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
n8n是n8n开源的一个可扩展的工作流自动化工具。 n8n 1.98.0之前版本存在输入验证错误漏洞，该漏洞源于登录流程中存在开放重定向漏洞，可能导致钓鱼攻击。
Possible ATT&CK Techniques 3 AI
T1566 · Phishing T1071.001 · Web Protocols T1566.002 · Spearphishing Link
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-49592
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
n8n Login Flow has Open Redirect Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
n8n is a workflow automation platform. Versions prior to 1.98.0 have an Open Redirect vulnerability in the login flow. Authenticated users can be redirected to untrusted, attacker-controlled domains after logging in, by crafting malicious URLs with a misleading redirect query parameter. This may lead to phishing attacks by impersonating the n8n UI on lookalike domains (e.g., n8n.local.evil.com), credential or 2FA theft if users are tricked into re-entering sensitive information, and/or reputation risk due to the visual similarity between attacker-controlled domains and trusted ones. The vulnerability affects anyone hosting n8n and exposing the `/signin` endpoint to users. The issue has been patched in version 1.98.0. All users should upgrade to this version or later. The fix introduces strict origin validation for redirect URLs, ensuring only same-origin or relative paths are allowed after login.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
指向未可信站点的URL重定向(开放重定向)
Source: CVE Program / CVE List V5
Vulnerability Title
n8n 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
n8n是n8n开源的一个可扩展的工作流自动化工具。 n8n 1.98.0之前版本存在输入验证错误漏洞，该漏洞源于登录流程中存在开放重定向漏洞，可能导致钓鱼攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2025-49592
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-49592
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: n8n
-
CVE-2026-77085
n8n before 2.34.1 SSRF Protection Bypass via SearXNG Tool -
CVE-2026-77084
n8n before 1.123.69 Remote Code Execution via Git Node Confi -
CVE-2026-77083
n8n before 1.123.69 Code Node Sandbox Escape via Function.pr -
CVE-2026-77082
n8n before 1.123.69 ReDoS via Filter and Switch Node -
CVE-2026-77081
n8n before 1.123.69 Allowed-Domains Bypass via GraphQL Node
Same vendor: n8n-io
-
CVE-2026-77085
n8n before 2.34.1 SSRF Protection Bypass via SearXNG Tool -
CVE-2026-77084
n8n before 1.123.69 Remote Code Execution via Git Node Confi -
CVE-2026-77082
n8n before 1.123.69 ReDoS via Filter and Switch Node -
CVE-2026-77083
n8n before 1.123.69 Code Node Sandbox Escape via Function.pr -
CVE-2026-77081
n8n before 1.123.69 Allowed-Domains Bypass via GraphQL Node
Same weakness: CWE-601
-
CVE-2026-78145
CTFd __init__.py _is_safe_url redirect -
CVE-2026-55185
Miniflux 2: Open Redirect Bypass -
CVE-2026-67362
Joomla Extension - j2commerce.com - Open redirect in cart co -
CVE-2026-49996
securedrop-proxy origin limitation can be bypassed with redi -
CVE-2026-71428
unstructured: Server-Side Request Forgery in the URL-based p
V. Comments for CVE-2025-49592
No comments yet