Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, a flaw in the SeaTable node's row:search and row:get operations allowed user-controlled input to be concatenated directly into SQL query strings without escaping or parameterization. In workflows where external user input is passed via expressions into the SeaTable node's search or row retrieval parameters, an attacker could manipulate the constructed query to retrieve unintended rows from the connected SeaTable base, bypassing row-level filtering logic implemented in the workflow. This issue has been patched in versions 1.123.32, 2.17.4, and 2.18.1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-05-04 | 2 | Disclosure2 |
| 2026-05-05 | 1 | General1 |
CVE-2026-42229 n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, a flaw in the SeaTable node's row:search and row:get operations al… https://www.cve.org/CVERecord?id=CVE-2026-42229
Post summary
The post announces a new vulnerability in n8n’s SeaTable node, impacting versions prior to 1.123.32, 2.17.4, and 2.18.1, and describes the affected operations.
CVE-2026-42229 SQL Injection in n8n SeaTable Node Prior to Versions 1.12... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42229 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The tweet announces CVE-2026-42229, a SQL Injection flaw in n8n SeaTable Node before version 1.12, linking to a vulnerability detail page but offering no PoC, exploit code, or patch information.
🚨*CVE* CVE-2026-42229 n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, a flaw in the SeaTable node's row:search and row:get operations al… https://www.cve.org/CVERecord?id=CVE-2026-42229 ----- Traducción: CVE-2026-42229 n8n… http://infoflow.cloud`
Post summary
The text announces CVE-2026-42229, indicating a flaw in n8n’s SeaTable node functions prior to specific versions; it provides basic technical details without mentioning any PoC, exploit, or patch.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | n8n | n8n | - | node.js | - |
| App | n8n | n8n | 2.18.0 | node.js | - |