Executive brief
n8n is a workflow automation platform that allows users to build and execute automated processes. An authenticated user with permission to create or edit workflows can exploit the Merge node's SQL mode to read arbitrary files from the server and execute arbitrary code, potentially compromising the entire n8n instance and any connected systems or data.
Technical details
This vulnerability stems from improper validation and sandboxing of SQL statements in the Merge node's AlaSQL SQL mode (CWE-94: Code Injection, CWE-89: SQL Injection). The AlaSQL SQL engine's sandbox does not sufficiently restrict certain SQL statements, allowing authenticated users to craft malicious SQL queries that execute arbitrary code or access sensitive files on the server. The attack requires network access and valid authentication credentials with workflow creation/modification permissions, but no user interaction beyond that. Successful exploitation allows complete compromise of the n8n instance including reading arbitrary files and remote code execution. Patches are available in n8n versions 2.14.1, 2.13.3, and 1.123.27.
Affected products
- n8n n8n < 2.14.1, < 2.13.3, < 1.123.27 (multiple version branches affected)
Timeline
- 2026-03-25: disclosed: Public disclosure via GitHub Security Advisory
- 2026-03-25: patched: Patches released in versions 2.14.1, 2.13.3, and 1.123.27