CVE-2026-119557

n8n from 2.14.0 through 2.46.3 contains a path traversal vulnerability in the Databricks node that allows unauthenticated attackers to reach arbitrary Databricks API endpoints by injecting unencoded resource identifiers. Attackers can supply ../ sequences and query strings via webhook, chat, or...

CVE-2026-119557 n8n from 2.14.0 through 2.46.3 Path Traversal via Databricks Node

n8n from 2.14.0 through 2.46.3 contains a path traversal vulnerability in the Databricks node that allows unauthenticated attackers to reach arbitrary Databricks API endpoints by injecting unencoded resource identifiers. Attackers can supply ../ sequences and query strings via webhook, chat, or...

CVE-2026-119557 n8n from 2.14.0 through 2.46.3 Path Traversal via Databricks Node

n8n from 2.14.0 through 2.46.3 contains a path traversal vulnerability in the Databricks node that allows unauthenticated attackers to reach arbitrary Databricks API endpoints by injecting unencoded resource identifiers. Attackers can supply ../ sequences and query strings via webhook, chat, or...

CVE-2026-119557

The n8n platform (versions 2.14.0 through 2.46.3 ) is vulnerable to a path traversal flaw within the Databricks node . An unauthenticated attacker can exploit this by injecting unencoded resource identifiers, specifically using ../ sequences and query strings. These inputs can be supplied via web...

EUVD-2026-113822

n8n from 2.14.0 through 2.46.3 contains a path traversal vulnerability in the Databricks node that allows unauthenticated attackers to reach arbitrary Databricks API endpoints by injecting unencoded resource identifiers. Attackers can supply ../ sequences and query strings via webhook, chat, or...

PT-2026-133495

n8n from 2.14.0 through 2.46.3 contains a path traversal vulnerability in the Databricks node that allows unauthenticated attackers to reach arbitrary Databricks API endpoints by injecting unencoded resource identifiers. Attackers can supply ../ sequences and query strings via webhook, chat, or...