A vulnerability identified as critical has been detected in n8n-io n8n up to 1.123.25/2.13.2/2.14.0. This issue affects some unknown processing of the component Environment Variable Handler. Performing a manipulation of the argument NODES_EXCLUDE results in SQL injection. The attack may be initiated remotely.
| Vendor | Product | Versions |
|---|---|---|
| n8n-io | n8n | < 1.123.26, >= 2.0.0-rc.0, < 2.13.3, = 2.14.0 |
Updated severity to CRITICAL, marked as actively exploited, and provided a more detailed description of the vulnerability.
Initial creation
