Executive brief
n8n is a workflow automation tool that allows users to connect different applications. A vulnerability in its Snowflake integration could allow an attacker to execute unauthorized database commands if a workflow is configured to use untrusted data in a database query. This could lead to unauthorized access or modification of sensitive data stored in Snowflake.
Technical details
The n8n Snowflake node's 'executeQuery' operation improperly interpolated expression values directly into SQL strings rather than using parameterized queries. This vulnerability class is SQL injection (CWE-89). An attacker can exploit this if a workflow author has embedded untrusted or externally-controlled expression data directly into a raw SQL query. Successful exploitation allows for unauthorized data access or manipulation within the connected Snowflake environment. The issue is resolved in versions 1.123.67, 2.31.5, and 2.32.1 by introducing a 'Query Parameters' field for positional placeholder binding.
Affected products
- n8n-io n8n < 1.123.67, >= 2.0.0-rc.0, < 2.31.5, >= 2.32.0, < 2.32.1
Timeline
- 2026-07-22: disclosed
- 2026-07-22: advisory
- 2026-07-22: patched
References
- https://github.com/n8n-io/n8n/security/advisories/GHSA-652q-gvq3-74qv
- https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.67
- https://github.com/n8n-io/n8n/releases/tag/n8n@2.31.5
- https://github.com/n8n-io/n8n/releases/tag/n8n@2.32.1
- https://api.github.com/repos/n8n-io/n8n/security-advisories/GHSA-652q-gvq3-74qv