anonhaven
Ad

CVE-2026-27497

CRITICAL CVSS 4.0: 9.4 EPSS 0.07%
Updated Feb 25, 2026
n8n
Parameter Value
CVSS 9.4 (CRITICAL)
Type CWE-94 (Code Injection), CWE-89 (SQL Injection)
Vendor n8n
Public PoC No

n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could leverage the Merge node's SQL query mode to execute arbitrary code and write arbitrary files on the n8n server. The issues have been fixed in n8n versions 2.10.1, 2.9.3, and 1.123.22.

Users should upgrade to one of these versions or later to remediate all known vulnerabilities. If upgrading is not immediately possible, administrators should consider the following temporary mitigations. Limit workflow creation and editing permissions to fully trusted users only, and/or disable the Merge node by adding `n8n-nodes-base.merge` to the `NODES_EXCLUDE` environment variable.

These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.

Attack Parameters

Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service

CVSS Vector v4.0

Weakness Type (CWE)

CWE-94 Code Injection
CWE-89 SQL Injection

References 4

https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.22
security-advisories@github.com
https://github.com/n8n-io/n8n/releases/tag/n8n@2.10.1
security-advisories@github.com
https://github.com/n8n-io/n8n/releases/tag/n8n@2.9.3
security-advisories@github.com
https://github.com/n8n-io/n8n/security/advisories/GHSA-wxx7-mcgf-j869
security-advisories@github.com
Share Post Share Share Share