N8N N8N — CVE-2026-44792 (Critical)

Date Jun 23, 2026

Type Vendor advisory

Signal Critical vendor advisory

Vendor / Product N8N · N8N

CVE CVE-2026-44792

Critical vendor advisory CVE-2026-44792

Summary

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an attacker with write access to the git repository connected to an n8n Source Control configuration could commit a malicious Data Table JSON file containing a crafted column name. When an administrator performed a Source Control Pull, n8n imported the file and could lead to SQL injection on the internal PostgreSQL instance. Exploitation requires the n8n instance uses PostgreSQL as its database backend, the Source Control feature is enabled and connected to a repository the attacker can write to, and an

Why it matters

This CVE carries a CRITICAL severity rating (CVSS 9.0) in N8N N8N. Patch or mitigate promptly. EPSS percentile: 27%.

Operator check

Review CVE-2026-44792 in your asset inventory. Apply patches per vendor guidance and verify N8N is not exposed. CVSS score: 9.0. EPSS probability: 0.4%; percentile: 27%.

Sources

NVD — CVE-2026-44792 Source reference

PatchBrief uses public sources. It does not scan environments, verify exposure, or replace vendor guidance.

Get watched-vendor alerts Subscribe free Back to feed