Loading vulnerability…
Remote Code Execution in n8n Merge Node SQL Query Mode
CVE-2026-27497 is a critical vulnerability in the n8n workflow automation platform affecting versions prior to 2.10.1, 2.9.3, and 1.123.22. An authenticated user with permission to create or modify workflows can abuse the Merge node's SQL query mode to achieve arbitrary code execution on the n8n server and write arbitrary files to the host filesystem. The flaw resides in the way the Merge node's SQL query mode can be leveraged during workflow construction or modification, allowing attacker-controlled input to cross intended execution boundaries and reach code execution and file-write primitives on the server.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation can result in full remote code execution in the context of the n8n server process, along with arbitrary file creation or modification on the host. This can enable complete compromise of the n8n instance, tampering with workflows or application data, deployment of persistence mechanisms, theft or manipulation of sensitive information accessible to the service, and potential follow-on actions against the underlying host or connected environments depending on the privileges granted to the n8n process.
If you can’t patch tonight, do this now.
If immediate patching is not possible, restrict workflow creation and editing permissions to fully trusted users only. As a temporary workaround, disable the Merge node by adding the Merge node package identifier to the NODES_EXCLUDE environment variable. These measures reduce exposure but do not fully remediate the vulnerability and should only be treated as short-term risk reduction steps.
Patch, then assume compromise.
Upgrade n8n to a fixed release: 2.10.1, 2.9.3, 1.123.22, or any later version in the relevant supported branch. Applying the vendor-provided patched version is the primary remediation and is required to fully address the vulnerability.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
8 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.