https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T08:08:28.471853+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-72750 CVE-2026-72750 — n8n before 1.123.67 SQL Injection via executeQuery Operation 2026-10-06T08:08:28.492147+00:00

Affected: n8n-io n8n

n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the Snowflake node's Execute Query operation, which interpolates expression values directly into the SQL string. When a workflow author embeds untrusted, externally-controlled expression data directly in a raw SQL query, that data is not parameterized, allowing SQL injection. The fix adds an optional 'Query Parameters' field to bind values via positional placeholders.