N8n Before 1.123.85 2.43.5 And 2.44.1 Filter Injection Via Quick Base Node Where Parameter

Back www.vulncheck.com

N8n Before 1.123.85 2.43.5 And 2.44.1 Filter Injection Via Quick Base Node Where Parameter

www.vulncheck.com • October 29, 2026

Share: View original

n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where Parameter

n8n >= 2.44.0, = 2.44.0, = 2.0.0, = 2.0.0, < 2.43.5

CWE-943 Improper Neutralization of Special Elements in Data Query Logic

GitHub Security Advisory (GHSA-65mv-v8rp-54wc)

Ready to get Started?

Vulnerability Prioritization Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.

Early Warning System Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

OData Filter Injection Vulnerabilities in n8n Affecting Multiple Nodes Two vulnerabilities have been identified in n8n versions prior to 1.123.85, 2.43.5, and 2.44.1, allowing OData filter injection via Outlook, SharePoint, and Quick Base nodes. The vulnerabilities are classified under CWE-943 for improper neutralization of special elements in data query logic. The affected versions include n8n >= 2.44.0, = 2.44.0, and < 2.43.5. GitHub Security Advisory GHSA-mgpr-56r4-5c67 and GHSA-65mv-v8rp-54wc have documented these issues. There is no indication of or proof-of-concept code available at this time. Users are advised to update to the latest versions to mitigate these vulnerabilities. The vulnerabilities were disclosed on 2026-10-29. 40

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

T1190 - Exploit Public-Facing Application

Vulnerabilities (1)

Filter Injection Via Quick Base Node Where Parameter