Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the fix for GHSA-f3f2-mcxc-pwjx did not cover the Snowflake node or the legacy MySQL v1 node. Both nodes construct SQL queries by directly interpolating user-controlled table names, column names, and update keys into query strings without identifier escaping, enabling SQL injection against the connected database. This issue has been patched in versions 1.123.32, 2.17.4, and 2.18.1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-05-04 | 1 | Patch1 |
| 2026-05-05 | 1 | Disclosure1 |
CVE-2026-42237 n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the fix for GHSA-f3f2-mcxc-pwjx did not cover the Snowflake node o… https://www.cve.org/CVERecord?id=CVE-2026-42237
Post summary
The CVE-2026-42237 in n8n’s Snowflake node was mitigated through updates to versions 1.123.32, 2.17.4, and 2.18.1, which addressed the previously uncovered hole.
CVE-2026-42237 SQL Injection in n8n Snowflake and Legacy MySQL v1 Nodes Prior to 1.123.32 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42237
Post summary
The post discloses a SQL injection flaw in n8n nodes older than version 1.123.32, but provides no evidence of active exploitation, exploitation tools, or patches.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | n8n | n8n | - | node.js | - |
| App | n8n | n8n | 2.18.0 | node.js | - |