SQL Injection in N8n-io N8n

CVE-2026-54313

n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user with workflow edit access could supply a malicious filter value in the MongoDB node's Find And Replace operation. The value was not validated before…

Vulnerability class: SQL Injection

Affected products

Weakness classification (CWE)

References