n8n SQL Injection Vulnerability (CVE-2026-42229) — Moderate Severity

Understanding the n8n SeaTable Node Vulnerability

A significant security flaw has been identified in n8n, an open-source platform widely used for workflow automation. This vulnerability, tracked as CVE-2026-42229, specifically impacts the SeaTable node within n8n. It’s an SQL injection vulnerability that could allow unauthorized access to sensitive data under specific conditions.

At its core, this issue arises because the SeaTable node, when performing “row:search” and “row:get” operations, does not properly handle external user input. Instead of securely separating user data from database commands, it directly combines them into SQL queries. This means a malicious user could craft special input that tricks the database into executing unintended commands, bypassing the security rules set within your n8n workflows.

For exploitation, an attacker would need to provide user-controlled input, for example, through a web form or webhook, which is then passed directly into the “searchTerm” or “rowId” parameters of a vulnerable SeaTable node. If these inputs aren’t validated, the attacker could manipulate the query to retrieve information that should otherwise be restricted.

CVE Details

• Product: n8n workflow automation platform
• CVE ID: CVE-2026-42229
• Published: April 22, 2026
• Last Modified: October 26, 2026
• Severity: Moderate
• Status: Analyzed

Affected Products

This vulnerability impacts n8n versions prior to:

• 1.123.32
• 2.17.4
• 2.18.1

If you are running any n8n version earlier than those listed, your system is vulnerable.

Current Status

The vulnerability has been thoroughly analyzed, and the n8n team has released patches to address the issue. Users are strongly encouraged to update their installations to the patched versions as soon as possible.

Severity Level

The vulnerability is rated as Moderate. While it doesn’t allow for full remote code execution, it could lead to unauthorized disclosure of information (Confidentiality) and potentially unauthorized modification of data (Integrity) within the connected SeaTable base, thereby bypassing workflow-level filtering logic. The CVSS 4.0 vector string for this vulnerability is: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N, indicating a network attack vector with low attack complexity and no user interaction required.

Possible Solutions

The most effective solution is to update your n8n installation to a patched version immediately:

• Upgrade to n8n version 1.123.32 or later.
• Upgrade to n8n version 2.17.4 or later.
• Upgrade to n8n version 2.18.1 or later.

Temporary Workarounds (if immediate upgrade is not possible):

These temporary measures can help reduce risk but do not fully resolve the vulnerability. They should only be used as a stopgap until a full upgrade can be performed:

• Restrict Workflow Permissions: Limit who can create and edit workflows to only fully trusted administrators.
• Disable the SeaTable Node: You can disable the affected node by adding n8n-nodes-base.seaTable to the NODES_EXCLUDE environment variable in your n8n configuration.
• Validate User Input: Be extremely cautious about passing unvalidated external user input directly into the SeaTable node’s search or row retrieval parameters. Implement robust input validation within your workflows.

References

https://github.com/n8n-io/n8n/security/advisories/GHSA-mp4j-h6gh-f6mp