n8n security advisory (AV26-1044)

Canadian Centre for Cyber Security Version 1 original current

Imported from official source

Serial number: AV26-1044Date: October 15, 2026 As of October 14, 2026, n8n is affected by vulnerabilities in the following product: n8n Prior to 1.123.83 Prior to 2.41.4 Prior to 2.42.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. SQL Injection in the Microsoft SQL Node via Expression Interpolation into the Query Field Advisory Shared-Workflow Credential Check Misses Nested and Tool Inline Sub-Workflows Overview - n8n-io/n8n

This version

Version
1 of 1
Recorded
October 15, 2026 15:00
Change
Initial
Content hash
7efdf3641ad6875537d42fdc4426cc28
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.