CVE-2026-58661: n8n - Disk Space Exhaustion via Data-Table File Upload Endpoint
Impact An authenticated user can repeatedly upload files to the data-table upload endpoint, bypassing the per-request quota check, which does not account for files already written to the shared temporary directory. This causes temporary files to accumulate on disk until the periodic cleanup runs, potentially exhausting available disk space on the host.
Patches Users should upgrade to the patched version once available to remediate the vulnerability.
Workarounds If upgrading is not immediately possible, administrators should consider the following temporary mitigations: - Restrict n8n instance access to fully trusted users only. - Set uploadMaxFileSize to a low value to limit individual upload size. - Monitor and alert on disk usage in the n8n temporary upload directory.
These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.
Other sources
n8n before 2.28.0 (and before 1.123.58 on the 1.x branch) contains a disk space exhaustion vulnerability in the data-table file upload endpoint. The per-request quota check does not account for files already written to the shared temporary directory, allowing an authenticated user to repeatedly upload files that accumulate on disk until the periodic cleanup runs, potentially exhausting available disk space on the host.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
npm/n8nto a version that resolves this vulnerability.Fixed in 1.123.58 - Upgrade
Upgrade
npm/n8nto a version that resolves this vulnerability.Fixed in 2.28.0 - Upgrade
Upgrade
n8nto a version that resolves this vulnerability.Fixed in 2.28.0 - Upgrade
Upgrade
n8nto a version that resolves this vulnerability.Fixed in 1.123.58 - Configuration
Set uploadMaxFileSize to a low value to limit individual upload size.
n8n uploadMaxFileSize = low value - Compensating control
Restrict n8n instance access to fully trusted users only.
- Compensating control
Monitor and alert on disk usage in the n8n temporary upload directory.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-58661?
CVE-2026-58661 has a medium severity rating of 5.3 according to the CVSS score.
How do I fix CVE-2026-58661?
To mitigate CVE-2026-58661, upgrade n8n to version 2.28.0 or later, or version 1.123.58 or later for the 1.x branch.
What is the impact of CVE-2026-58661?
CVE-2026-58661 allows an authenticated user to exhaust disk space through repeated file uploads to a data-table endpoint.
Which versions of n8n are affected by CVE-2026-58661?
CVE-2026-58661 affects n8n versions prior to 2.28.0 and 1.x branch versions before 1.123.58.
Who is impacted by CVE-2026-58661?
Authenticated users of n8n systems running vulnerable versions may exploit CVE-2026-58661, leading to potential disk space depletion.