Query Injection Vulnerability in n8n Affected by Elasticsearch and Google Cloud Firestore

CVE-2026-85167

What is CVE-2026-85167?

n8n, an open-source workflow automation tool, is susceptible to a query injection vulnerability affecting its integration with Elasticsearch and Google Cloud Firestore. This vulnerability arises from the improper handling of user input in the Document Get All and Document Query operations. Attackers can exploit this weakness by providing input containing specific quote and brace characters, potentially allowing them to manipulate the constructed JSON query. As a result, a request intended for single-document retrieval could return all documents from a collection, exposing sensitive data inadvertently.

References