N8n CVE-2026-33660

Authenticated user with permission to create or modify workflows in n8n versions prior to 2.14.1, 2.13.3, or 1.123.26. Attacker must access the Merge node's 'Combine by SQL' mode to exploit insufficient AlaSQL sandbox restrictions for file read and RCE.

This vulnerability presents high real-world risk despite requiring authentication (CVSS PR:L). The CVSS 4.0 score of 9.4 reflects network accessibility (AV:N), low attack complexity (AC:L), no attack requirements (AT:N), and complete compromise of confidentiality, integrity, and availability across both vulnerable and subsequent systems (VC:H/VI:H/VA:H/SC:H/SI:H/SA:H). The attack is straightforward for any authenticated user with workflow permissions, making it highly automatable. The technical impact is maximum as it allows both data exfiltration and remote code execution on the host system. While no EPSS score or KEV listing is provided, the combination of low complexity, network attack vector, and RCE capability makes this a genuine priority for organizations running n8n. The severity is somewhat mitigated by the authentication requirement, but in typical n8n deployments where multiple users have workflow creation rights, the attack surface can be substantial. The availability of patches and the public security advisory (GHSA-58qr-rcgv-642v) increases the likelihood of exploitation attempts.

An authenticated attacker with workflow creation privileges logs into an n8n instance and creates a new workflow containing a Merge node configured in 'Combine by SQL' mode. The attacker crafts a malicious SQL query that exploits the insufficient AlaSQL sandbox restrictions to read sensitive files such as /etc/passwd, environment variables containing secrets, or application configuration files. Escalating the attack, the attacker injects SQL statements that execute arbitrary Node.js code, establishing a reverse shell to the attacker's server and gaining full control over the n8n host system, potentially pivoting to other internal systems accessible from the compromised server.