Vulnerability · Published Aug 11, 2026 · Assigned by VulnCheck

CVE-2026-72750n8n before 1.123.67 SQL Injection via executeQuery Operation

Medium 5.3

In plain English

A medium-severity SQL injection in n8n from n8n-io. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 4.0)5.3Medium

Exploit odds (30 days)0.5%top 59.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the Snowflake node's Execute Query operation, which interpolates expression values directly into the SQL string. When a workflow author embeds untrusted, externally-controlled expression data directly in a raw SQL query, that data is not parameterized, allowing SQL injection. The fix adds an optional 'Query Parameters' field to bind values via positional placeholders.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
npm	n8n	1.123.67	GHSA-652q-gvq3-74qv
npm	n8n	2.32.1	GHSA-652q-gvq3-74qv
npm	n8n	2.31.5	GHSA-652q-gvq3-74qv

Affected products (as reported)

Vendor	Product	Versions
n8n-io	n8n	0 – before 1.123.67
n8n-io	n8n	2.32.0 – before 2.32.1
n8n-io	n8n	2.0.0-rc.0 – before 2.31.5

Weakness: CWE-89 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N

References

GitHub Security Advisory (GHSA-652q-gvq3-74qv) vendor-advisory
VulnCheck Advisory: n8n before 1.123.67 SQL Injection via executeQuery Operation third-party-advisory