Vulnerability · Published Oct 1, 2026 · Assigned by VulnCheck

CVE-2026-103258n8n before 2.39.6 and 2.40.x before 2.40.1 Filter Bypass via Parameter Interpolation

Medium 6.8

In plain English

A medium-severity security flaw in n8n from n8n-io. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).

Severity (CVSS 3.1)6.8Medium

Exploit odds (30 days)0.3%top 76.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain an unescaped parameter interpolation vulnerability in SendGrid, Freshservice, and ServiceNow nodes that allows attackers to bypass filters by breaking out of query literals. Attackers can exploit this by binding vulnerable node parameters to untrusted external input to widen single-record lookups into match-all queries, exposing bulk data including contact lists, tickets, and directory entries.

Affected products (as reported)

Vendor	Product	Versions
n8n-io	n8n	0 – before 2.39.62.40.0 – before 2.40.1

Weakness: CWE-943 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

References

GitHub Security Advisory (GHSA-5pg9-2vqx-r6jm) vendor-advisory
VulnCheck Advisory: n8n before 2.39.6 and 2.40.x before 2.40.1 Filter Bypass via Parameter Interpolation third-party-advisory