{"id":"GHSA-5vj6-wjr7-5v9f","summary":"n8n allows open redirects via the /signin endpoint","details":"### Impact\n\nThis is an Open Redirect (CWE-601) vulnerability in the login flow of n8n. Authenticated users can be redirected to untrusted, attacker-controlled domains after logging in, by crafting malicious URLs with a misleading redirect query parameter.\n\nThis may lead to:\n\n- Phishing attacks by impersonating the n8n UI on lookalike domains (e.g., n8n.local.evil.com)\n- Credential or 2FA theft if users are tricked into re-entering sensitive information\n- Reputation risk due to the visual similarity between attacker-controlled domains and trusted ones\n\nThe vulnerability affects anyone hosting n8n and exposing the `/signin` endpoint to users.\n\n### Patches\n\nThe issue has been patched in [1.98.0](https://github.com/n8n-io/n8n/releases/tag/n8n%401.98.0).\nAll users should upgrade to this version or later.\n\nThe fix introduces strict origin validation for redirect URLs, ensuring only same-origin or relative paths are allowed after login.\n\nPatch commit: https://github.com/n8n-io/n8n/pull/16034","aliases":["CVE-2025-49592"],"modified":"2025-06-27T14:19:02Z","published":"2025-06-27T14:19:01Z","database_specific":{"cwe_ids":["CWE-601"],"severity":"MODERATE","github_reviewed":true,"github_reviewed_at":"2025-06-27T14:19:01Z","nvd_published_at":"2025-06-26T20:15:29Z"},"references":[{"type":"WEB","url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-5vj6-wjr7-5v9f"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-49592"},{"type":"WEB","url":"https://github.com/n8n-io/n8n/pull/16034"},{"type":"WEB","url":"https://github.com/n8n-io/n8n/commit/4865d1e360a0fe7b045e295b5e1a29daad12314e"},{"type":"PACKAGE","url":"https://github.com/n8n-io/n8n"},{"type":"WEB","url":"https://github.com/n8n-io/n8n/releases/tag/n8n%401.98.0"}],"affected":[{"package":{"name":"n8n","ecosystem":"npm","purl":"pkg:npm/n8n"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.98.0"}]}],"database_specific":{"last_known_affected_version_range":"\u003c= 1.97.0","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/06/GHSA-5vj6-wjr7-5v9f/GHSA-5vj6-wjr7-5v9f.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"}]}