Executive brief
n8n is a workflow automation platform used to connect and automate business processes across multiple applications. The SeaTable node in n8n contains a SQL injection vulnerability in its search and row retrieval operations that allows attackers to bypass row-level filtering and retrieve unintended data from connected SeaTable databases. This risk is limited to workflows that accept external user input and pass it unsanitized into SeaTable node parameters.
Technical details
The vulnerability is a SQL injection (CWE-89) flaw in the SeaTable node's row:search and row:get operations, where user-controlled input passed via expressions is concatenated directly into SQL query strings without escaping or parameterization. Attack requires network access to n8n, low privileges (ability to create or modify workflows), and a specific configuration where external user input (from forms, webhooks, or other sources) is passed into searchTerm or rowId parameters. An attacker can craft malicious input to manipulate the SQL query and retrieve unintended rows, bypassing intended row-level access controls. The vulnerability affects n8n versions prior to 1.123.32, 2.17.4, and 2.18.1; patches are available in those versions and later.
Affected products
- n8n n8n before 1.123.32; 2.0.0 before 2.17.4; 2.18.0 before 2.18.1
Timeline
- 2026-04-22: disclosed
- 2026-04-22: patched: n8n versions 1.123.32, 2.17.4, and 2.18.1 released
- 2026-04-29: advisory