CVE-2026-126383

The n8n workflow automation tool is vulnerable to a NoSQL injection in the MongoDB node's Update and Find And Replace operations. The root cause is insufficient validation of the update key value when processed from incoming items. Affected versions include before 1.123.89 , 2.x before 2.45.5 , 2...