EUVD-2026-56140
GHSA-j3gw-mm62-q9gj
Severity by source
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
AC:H reflects the prerequisite vulnerable workflow configuration; PR:L captures required workflow-author access; S:C and C:H/I:H reflect Snowflake database impact as a separate, high-value system.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
3DescriptionCVE.org
n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the Snowflake node's Execute Query operation, which interpolates expression values directly into the SQL string. When a workflow author embeds untrusted, externally-controlled expression data directly in a raw SQL query, that data is not parameterized, allowing SQL injection. The fix adds an optional 'Query Parameters' field to bind values via positional placeholders.
AnalysisAI
SQL injection in n8n's Snowflake node Execute Query operation exposes downstream Snowflake databases to unauthorized data access and manipulation when workflow authors embed externally-controlled expression data directly into raw SQL strings without parameterization. Affected across three version lines - n8n below 1.123.67, 2.0.0-rc.0 through below 2.31.5, and 2.32.0 through below 2.32.1 - the flaw is rooted in direct string interpolation rather than prepared statements. No public exploit has been identified at time of analysis, but the CVSS 4.0 vector signals high subsequent-system confidentiality and integrity impact against connected Snowflake environments.
Technical ContextAI
n8n is an open-source, Node.js-based workflow automation platform distributed as the npm package n8n-io/n8n, enabling users to compose automated data pipelines by connecting nodes representing external services. Its Snowflake node integrates with Snowflake's cloud data warehouse via the Snowflake JavaScript SDK. The Execute Query operation in affected versions constructs SQL statements by directly interpolating n8n expression values - JavaScript-evaluated strings derived from workflow inputs - into the query string, violating the fundamental principle of separating code from data. CWE-89 (Improper Neutralization of Special Elements used in an SQL Command) precisely describes this root cause: user-controlled data reaches an SQL interpreter without proper escaping or parameterization. The CPE cpe:2.3:a:n8n-io:n8n:*:*:*:*:*:*:*:* spans all affected version ranges. The fix introduces a Query Parameters field using positional placeholders, which binds values at the database driver layer rather than in the query string, eliminating the injection surface.
RemediationAI
Upgrade n8n to version 1.123.67 if on the 1.x line, 2.31.5 if on the 2.x line below 2.32.0, or 2.32.1 if on the 2.32.x line, per the vendor advisory at https://github.com/n8n-io/n8n/security/advisories/GHSA-652q-gvq3-74qv. Following upgrade, migrate existing Snowflake executeQuery nodes to use the newly introduced Query Parameters field with positional placeholders rather than expression interpolation in raw SQL strings, to eliminate the injection path in pre-existing workflows. If immediate upgrade is not feasible, the vendor recommends three temporary mitigations - each with acknowledged limitations: restrict workflow creation and editing permissions to fully trusted users only (this reduces the likelihood of the vulnerable pattern being introduced but does not remediate existing vulnerable workflows); audit all existing Snowflake executeQuery workflows and remove any expression that resolves to externally-controlled data embedded in raw SQL (effective but requires thorough workflow inventory); and restrict network access to webhook and trigger endpoints feeding data into Snowflake executeQuery nodes (reduces attack reach but may break legitimate integrations). The vendor explicitly notes that none of these workarounds fully remediates risk and they should be treated as short-term measures only.
n8n workflow automation (through 1.121.2) allows authenticated users to execute arbitrary code via the n8n service, with
n8n workflow automation (1.65.0 to 1.121.0) allows unauthenticated file access through form-based workflows. A critical
n8n has a fifth critical RCE vulnerability (CVSS 9.9) in the Expression evaluator, enabling code execution through craft
A prototype pollution vulnerability in the XML and GSuiteAdmin nodes of n8n workflow automation platform allows authenti
An authenticated user with workflow creation or modification privileges in n8n workflow automation platform can exploit
n8n-workflows Main Commit ee25413 allows attackers to execute a directory traversal via the download_workflow function w
Authenticated n8n users can hijack administrator accounts when LDAP authentication is enabled by manipulating their LDAP
The n8n package 0.218.0 for Node.js allows Escalation of Privileges. Rated high severity (CVSS 8.8), this vulnerability
SQL injection in n8n's Data Table Get node allows authenticated users with workflow modification permissions to execute
Authenticated users can exploit string formatting and exception handling in n8n's Python task executor to escape sandbox
n8n workflow automation platform Community Edition contains an authorization bypass vulnerability allowing authenticated
The n8n package 0.218.0 for Node.js allows Information Disclosure. Rated high severity (CVSS 7.5), this vulnerability is
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today