CVE-2026-54310

n8n contains a SQL injection vulnerability in the TimescaleDB and legacy Postgres v1 nodes, exploitable by an authenticated user with workflow-edit/create permissions. Before versions 2.25.7 and 2.26.2, crafted parameters could inject arbitrary SQL into the connected database under the privileges...