CVE-2026-103248

Summary

This vulnerability allows attackers to inject filter expressions, leading to unauthorized data access, modification, or deletion. It matters because it can result in complete data compromise.

Exploitability

Exploitation is relatively straightforward given untrusted input can inject filter expressions, requiring only access to the Supabase node's Filters (String) mode.

Blast radius

If exploited, attackers can read, update, or delete entire tables, leading to significant data loss or corruption.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to n8n version 1.123.80 or later, 2.39.6 or later, or 2.40.1 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.