Lucene search
+L

1 matches found

OSV
OSV
added 2026/02/25 9:23 p.m.13 views

GHSA-WXX7-MCGF-J869 n8n has Potential Remote Code Execution via Merge Node

Impact An authenticated user with permission to create or modify workflows could leverage the Merge node's SQL query mode to execute arbitrary code and write arbitrary files on the n8n server. Patches The issues have been fixed in n8n versions 2.10.1, 2.9.3, and 1.123.22. Users should upgrade to...

9.9CVSS6.4AI score0.00765EPSS
SaveExploits0References6
Rows per page
Query Builder