CVE-2026-44792

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an attacker with write access to the git repository connected to an n8n Source Control configuration could commit a malicious Data Table JSON file containing a crafted column name. When an administrator...

CVE-2026-44792

n8n has a Source Control Pull SQL Injection vulnerability (CVE-2026-44792) in versions prior to 1.123.43, 2.20.7, and 2.22.1. An attacker with write access to the git repository used by the Source Control feature can commit a crafted Data Table JSON file containing a malicious column name. When a...