CVE-2026-44792 Details
Description
n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an attacker with write access to the git repository connected to an n8n Source Control configuration could commit a malicious Data Table JSON file containing a crafted column name. When an administrator performed a Source Control Pull, n8n imported the file and could lead to SQL injection on the internal PostgreSQL instance. Exploitation requires the n8n instance uses PostgreSQL as its database backend, the Source Control feature is enabled and connected to a repository the attacker can write to, and an administrator triggers a Source Control Pull. This vulnerability is fixed in 1.123.43, 2.22.1, and 2.20.7.
A SQL injection vulnerability has been identified in n8n versions prior to 1.123.43, 2.21.1, and 2.20.7. The issue arises when an attacker with write access to a connected git repository commits a malicious Data Table JSON file with a crafted column name. When an administrator performs a Source Control Pull, n8n imports the file, which can lead to SQL injection on the internal PostgreSQL database. Exploitation requires the Source Control feature to be enabled, connected to a repository the attacker can write to, and an administrator must trigger a Source Control Pull.
Users can upgrade to n8n versions 1.123.43, 2.21.1, or 2.20.7 to address this vulnerability. If an immediate upgrade is not possible, administrators should disable the Source Control feature if not needed, restrict write access to trusted users, and avoid pulling from repositories that may have been altered by untrusted parties.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 23, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/n8n-io/n8n/security/advisories/GHSA-mhrx-qhrj-673w | [email protected] | MitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| n8n n8n | < 1.123.43 >= 2.0.0, < 2.20.7 >= 2.21.0, < 2.22.1 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 24, 2026 | Initial Analysis | [email protected] |
| Jun 23, 2026 | CVE Modified | CISA-ADP |
| Jun 23, 2026 | New CVE Received | [email protected] |