N8N N8N — CVE-2026-54310 (Critical)

Date Jun 23, 2026

Type Vendor advisory

Signal Critical vendor advisory

Vendor / Product N8N · N8N

CVE CVE-2026-54310

Critical vendor advisory CVE-2026-54310

Summary

n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authenticated user with permission to create or modify workflows could supply a crafted parameters to the TimescaleDB and/or legacy Postgres v1 node's allowing arbitrary SQL to be injected and executed against the connected database within the privileges of the configured database account. This vulnerability is fixed in 2.25.7 and 2.26.2.

Why it matters

This CVE carries a CRITICAL severity rating (CVSS 9.9) in N8N N8N. Patch or mitigate promptly. EPSS percentile: 23%.

Operator check

Review CVE-2026-54310 in your asset inventory. Apply patches per vendor guidance and verify N8N is not exposed. CVSS score: 9.9. EPSS probability: 0.3%; percentile: 23%.

Sources

NVD — CVE-2026-54310 Source reference

PatchBrief uses public sources. It does not scan environments, verify exposure, or replace vendor guidance.

Get watched-vendor alerts Subscribe free Back to feed