SQL Query Sandbox Vulnerability in n8n Workflow Automation Platform

CVE-2026-54311

What is CVE-2026-54311?

In the n8n open source workflow automation platform, a vulnerability exists in the Merge node's SQL Query mode prior to versions 2.25.7 and 2.26.2. Authenticated users authorized to create or modify workflows could exploit this vulnerability by polluting the sandbox context. This context is cached and reused across workflows, allowing prototype mutations made by one user to affect other users' executions. Consequently, a low-privileged attacker could intercept sensitive workflow data from other users operating within the same instance. This issue specifically impacts multi-user configurations, emphasizing the need for prompt updates to maintain workflow integrity and security.

References