An improper SQL neutralization vulnerability in the SeaTable node of n8n allows authenticated attackers to manipulate database queries and bypass row-level filtering.

This is a SQL Injection vulnerability (CWE-89) affecting the SeaTable node's row:search and row:get operations. An authenticated user can inject unescaped input into SQL query strings, requiring low privileges and network access.

A successful exploitation of this vulnerability allows unauthorized users to retrieve unintended rows from connected SeaTable bases, potentially exposing sensitive data and violating row-level security controls. Although the CVSS score is 8.8 (High), the confidentiality and integrity impact on the surrounding context elevate the operational risk for organizations utilizing automated workflows with external inputs.

Immediate Action: Update the n8n software package to version 1.123.32, 2.17.4, 2.18.1, or later immediately.

Proactive Monitoring: Monitor workflow execution logs and database access patterns for unusual query structures or unexpected data retrieval volumes originating from automated nodes.

Compensating Controls: Implement input validation rules within workflows to sanitize external parameters before they are passed into SeaTable node search or row retrieval parameters.

Public Exploit Available: No

Organizations utilizing the affected versions of n8n must prioritize upgrading to the patched releases to eliminate the risk of query manipulation. Reviewing existing workflow designs to ensure strict parameterization of user input will provide an essential layer of defense against similar injection vectors.