The vulnerability is an arbitrary file read and write flaw in the Snowflake node of n8n. The node passes free‑form Execute Query input, including client‑side commands, directly to the Snowflake SDK without applying n8n's file‑access restrictions. The result is that an authenticated user who can supply valid Snowflake credentials can upload a local file from the n8n host or overwrite an existing file that has been staged in Snowflake. This creates a confidentiality risk by allowing disclosure of arbitrary host files and a integrity risk by permitting modification of files that should be protected.

vulnerable versions are n8n‑io:n8n before 1.123.69, n8n‑io:n8n before 2.33.4 for 2.x releases, and n8n‑io:n8n before 2.34.1 for 2.34.x releases. Systems running any of these versions are at risk.

The CVSS score of 8.7 indicates a high severity, but the EPSS score is not available, so the estimated likelihood of exploitation cannot be quantified from publicly available data. The vulnerability is listed in CISA KEV as not listed, meaning no confirmed exploit is widely reported yet. The typical attack vector is a legitimate authenticated user who has Snowflake credentials and uses the Snowflake node in a workflow; the user can then submit arbitrary queries that result in file read/write operations on the n8n host. Because the flaw requires authentication, the attack is limited to users with valid Snowflake access, but once that access is granted, the attacker can read or modify arbitrary files on the host system.