Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/08/27 5:06 p.m.7 views

n8n-nodes-sqlite3 vulnerable to path traversal via user-controlled database file path (db_path parameter)

Affected versions 1.0.0 Patched version 1.0.0 Description In versions prior to 1.0.0, the SQLite node accepted the database file path as a direct node parameter visible and editable in the workflow. A workflow author who mapped untrusted user input to the dbpath field could allow an attacker to...

6.1CVSS5.2AI score
SaveExploits0References4Affected Software1
Rows per page
Query Builder