CVE Intelligence
Analysis AI-assisted

CVE-2026-54310: n8n: SQL Injection in TimescaleDB and Postgres v1 Nodes

CVE-2026-54310 is an SQL injection flaw in the TimescaleDB and legacy Postgres v1 nodes of the n8n workflow automation platform. An authenticated user who can create or modify workflows may be able to run arbitrary SQL against the connected database, with the privileges of the configured database account. The vendor fixed the issue in versions 2.25.7 and 2.26.2.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

n8n is an open source workflow automation platform. CVE-2026-54310 affects the TimescaleDB and legacy Postgres v1 nodes, where parameters supplied in a workflow are not handled safely and can alter the SQL statement sent to the database. The weakness is classified as CWE-89 (SQL Injection).

Impact

  • The record states that arbitrary SQL can be executed against the connected database.
  • The reach of the attack is limited to the privileges of the database account configured in the node.
  • The NVD score is 9.9 (critical) under CVSS 3.1, with high confidentiality, integrity and availability impact and a scope change.
  • The GitHub CNA score is 6.5 under CVSS 4.0.

Affected Products and Versions

  • n8n: versions before 2.25.7, and versions from 2.26.0 up to (not including) 2.26.2.
  • Versions 2.25.7 and 2.26.2 are stated as fixed.

Exploitation Status

CISA KEV does not list this CVE. No confirmed exploitation in the wild appears in the sources consulted for this analysis.

Remediation and Mitigation

  • Upgrade n8n to 2.25.7 or 2.26.2 (or a later release in the same line).
  • Review the GitHub security advisory for the vendor's mitigation guidance: GHSA-c37g-w77q-m4vp.
  • Until patching is complete, limit which users can create or modify workflows, and use database accounts with the least privilege needed by the nodes.

Detection Guidance

  • Review audit logs and workflow change history for recent creation or modification of workflows that use the TimescaleDB or legacy Postgres v1 nodes.
  • Monitor database logs for unexpected query patterns or errors originating from the n8n database account.

Limitations of the Available Information

  • The record does not include the specific parameters affected or a technical root-cause description.
  • No title was provided in the source record; the title here is derived from the description.
  • The record does not state whether other n8n nodes are affected.
  • The two scores differ by CVSS version and provider; the basis of each score is not described in the record.

Frequently asked questions

Which n8n versions are affected by CVE-2026-54310?

The record lists versions before 2.25.7 and versions from 2.26.0 before 2.26.2 as affected. Versions 2.25.7 and 2.26.2 are stated as fixed.

Is CVE-2026-54310 known to be actively exploited?

No. CISA KEV does not list this CVE, and no confirmed exploitation in the wild appears in the sources consulted.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.