CVE-2026-103253

Summary

The flaw allows SQL injection, enabling attackers to execute arbitrary DDL or DML commands with the database connection's privileges, potentially leading to data loss or corruption.

Exploitability

Exploitation is relatively straightforward as attackers can inject single quotes to append SQL statements, requiring only basic knowledge of SQL injection techniques.

Blast radius

If exploited, the impact could be severe, including unauthorized data manipulation or database compromise, affecting the integrity and confidentiality of the connected database.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to n8n version 1.123.80 or later, 2.39.6 or later, or 2.40.1 or later, as applicable.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.