n8n: n8n Has a Source Control Pull SQL Injection
n8n
- Severity
- Critical, CVSS 9.0
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
- Record
- CVE-2026-44792
- Affects
- n8n
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- June 23, 2026
- Source last modified
- October 26, 2026
Description
n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an attacker with write access to the git repository connected to an n8n Source Control configuration could commit a malicious Data Table JSON file containing a crafted column name. When an administrator performed a Source Control Pull, n8n imported the file and could lead to SQL injection on the internal PostgreSQL instance. Exploitation requires the n8n instance uses PostgreSQL as its database backend, the Source Control feature is enabled and connected to a repository the attacker can write to, and an administrator triggers a Source Control Pull. This vulnerability is fixed in 1.123.43, 2.22.1, and 2.20.7.
Description quoted from the NVD record.
Who is affected
n8n is a tool for automating tasks by connecting apps and services into step-by-step workflows. This flaw affects versions before 1.123.43, 2.22.1 and 2.20.7. It only matters if your n8n stores its data in a PostgreSQL database, the Source Control feature (which links n8n to a git code storage space, called a repository) is turned on, and an attacker can make changes to that repository. The attacker could add a specially made data table file. When an administrator then pulls changes from the repository, n8n could run harmful commands against its own internal database. This flaw is rated Critical.
What to do
- The person who installed or runs n8n for your organization should check which version is in use and whether n8n stores its data in a PostgreSQL database with the Source Control feature turned on.
- If your version is affected, update n8n to one of the fixed versions for this flaw:
1.123.43,2.22.1or2.20.7. Pick the one that fits your current setup. - If an IT provider or vendor runs n8n for your organization, send them this advisory and ask when the update will be done.
Analysis written from the source record as of October 26, 2026 and reviewed before publishing.