Which versions of N8n are affected by CVE-2026-33660?

A critical vulnerability in n8n workflow automation platform allows authenticated users with workflow privileges to read sensitive files and execute arbitrary code on affected servers.. A patch is available.

Is there a public PoC exploit available for CVE-2026-33660?

Yes, a public proof-of-concept exploit is available for CVE-2026-33660. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-33660?

Within 24 hours: Inventory all n8n instances and document current versions; restrict workflow creation/modification privileges to essential personnel only; enable audit logging for all workflow changes. Within 7 days: Implement network segmentation to isolate n8n instances; disable the 'Combine by SQL' feature in the Merge node if operationally feasible; review audit logs for suspicious workflow activity. Within 30 days: Upgrade to patched versions (2.14.1, 2.13.3, or 1.123.26) once verified in test environment; conduct forensic review of workflows created or modified in past 90 days; restore access controls to baseline post-upgrade.

N8n CVE-2026-33660

Q: What is the CVSS score of CVE-2026-33660?

CVE-2026-33660 has a CVSS 4.0 base score of 9.4 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-15942 CRITICAL

Code Injection (CWE-94)

2026-03-25 GitHub_M

GHSA-58qr-rcgv-642v

RCE Code Injection N8n

9.4

CVSS 4.0 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

9.4 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

PoC Detected

Mar 30, 2026 - 14:54 vuln.today

Public exploit code

EUVD ID Assigned

Mar 25, 2026 - 17:47 euvd

EUVD-2026-15942

Analysis Generated

Mar 25, 2026 - 17:47 vuln.today

CVE Published

Mar 25, 2026 - 17:09 nvd

CRITICAL 9.4

DescriptionGitHub Advisory

n8n is an open source workflow automation platform. Prior to versions 2.14.1, 2.13.3, and 1.123.26, an authenticated user with permission to create or modify workflows could use the Merge node's "Combine by SQL" mode to read local files on the n8n host and achieve remote code execution. The AlaSQL sandbox did not sufficiently restrict certain SQL statements, allowing an attacker to access sensitive files on the server or even compromise the instance. The issue has been fixed in n8n versions 2.14.1, 2.13.3, and 1.123.26. Users should upgrade to one of these versions or later to remediate the vulnerability. If upgrading is not immediately possible, administrators should consider the following temporary mitigations: Limit workflow creation and editing permissions to fully trusted users only, and/or disable the Merge node by adding n8n-nodes-base.merge to the NODES_EXCLUDE environment variable. These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.

Articles & Coverage 1

vuln.today Threat Landscape 23/03-30/03/2026: Supply Chain Attacks and Auth Failures Surge Mar 30, 2026

AnalysisAI

An authenticated user with workflow creation or modification privileges in n8n workflow automation platform can exploit the Merge node's 'Combine by SQL' mode to read arbitrary local files on the n8n host and achieve remote code execution. n8n versions prior to 2.14.1, 2.13.3, and 1.123.26 are affected. The vulnerability carries a CVSS 4.0 score of 9.4 (Critical) due to insufficient sandbox restrictions in the AlaSQL component, allowing SQL injection-style attacks against the host system. No public proof-of-concept or active exploitation (KEV) status has been reported at this time.

Technical ContextAI

The vulnerability affects n8n (cpe:2.3:a:n8n-io:n8n), an open-source workflow automation platform built on Node.js. The root cause is classified as CWE-94 (Improper Control of Generation of Code / Code Injection). The issue stems from inadequate sandboxing in the AlaSQL library used by n8n's Merge node when operating in 'Combine by SQL' mode. AlaSQL is a JavaScript SQL database that allows SQL queries to be executed in-memory within the browser or Node.js environment. The insufficient restrictions on SQL statements permitted attackers to break out of the intended sandbox environment, enabling them to execute arbitrary SQL commands that could read the filesystem or execute system-level code. This represents a classic sandbox escape vulnerability where security boundaries intended to isolate user-controlled SQL from the underlying system were not properly enforced.

RemediationAI

Immediately upgrade n8n to version 2.14.1, 2.13.3, or 1.123.26 depending on your current version branch, as detailed in the GitHub security advisory at https://github.com/n8n-io/n8n/security/advisories/GHSA-58qr-rcgv-642v. If immediate patching is not feasible, implement temporary mitigations by restricting workflow creation and editing permissions to only fully trusted administrators, and/or disable the Merge node entirely by adding 'n8n-nodes-base.merge' to the NODES_EXCLUDE environment variable. Note that these workarounds provide only partial risk reduction and should be considered temporary measures until the patch can be applied. Review audit logs for any suspicious workflow creations or modifications involving the Merge node's SQL functionality prior to patching.