Executive brief
n8n is a workflow automation platform that connects various business applications and data services. The Elasticsearch and Google Cloud Firestore integration nodes contain a flaw where specially crafted input can bypass query restrictions and allow attackers with access to the platform to read entire data collections instead of single documents, potentially exposing sensitive information.
Technical details
A query injection vulnerability exists in the Elasticsearch Document Get All and Google Cloud Firestore Document Query nodes where expression values are interpolated directly into JSON query strings before parsing, without proper escaping. An attacker with access to n8n (authenticated user with low privileges) can inject quote and brace characters into expression-based query fields to close the intended query field and introduce new query operators. This transforms a single-document lookup into a full-collection query, allowing unauthorized data exfiltration from the connected Elasticsearch or Firestore database. The vulnerability has been patched in n8n versions 2.35.4 and 2.36.2 or later.
Affected products
- n8n n8n before 2.35.4 and 2.36.x before 2.36.2
Timeline
- 2026-08-19: disclosed
- 2026-09-03: advisory
- 2026-08-19: patched: Patches available in versions 2.35.4 and 2.36.2