EUVD-2026-125184

n8n before 2.43.5, 2.44.x before 2.44.1, and 3.x before 3.0.1 contains an SQL injection vulnerability in the Vector Store OracleDB node, which does not validate Metadata Filter keys used in vector search queries. Attackers can supply crafted filter keys through untrusted workflow input such as...

CVE-2026-126381

The n8n workflow automation tool is vulnerable to an SQL injection in the Vector Store (OracleDB) node, affecting versions before 2.43.5 , 2.44.x before 2.44.1 , and 3.x before 3.0.1 . The root cause is a failure to validate Metadata Filter keys used in vector search queries. An attacker can prov...