n8n, an open source workflow automation platform, contains a flaw in the Merge node that, when set to SQL query mode, allows an authenticated user with workflow creation or editing permissions to execute arbitrary user‑provided code and write files on the server. The problem is due to unsanitized inputs in the SQL interpreter, enabling code injection (CWE‑94) and command injection (CWE‑89). With this ability the attacker can compromise the entire n8n installation, gaining full control over the host, reading and modifying sensitive data, and installing malware.

The issue affects the n8n product from the vendor n8n‑io. Versions older than 2.10.1, 2.9.3, and 1.123.22 are vulnerable. All installations that run these versions and have a Merge node exposed to users with permission to create or edit workflows are at risk.

The CVSS score is 9.4, indicating high severity. The EPSS score is less than 1 %, meaning exploitation is considered unlikely at present, and the vulnerability is not listed in CISA’s KEV catalog. The most likely attack vector is authenticated exploitation via a valid user account with workflow modification rights; a compromise does not require network exposure as the vulnerable functionality runs on the server itself. Because the flaw permits arbitrary code execution and file writes, the impact is complete compromise of the affected system once the attacker succeeds.