CVE-2026-72750 n8n-io CVE debrief

Who should care

Organizations using n8n for workflow automation should be aware of this vulnerability and take steps to mitigate it. This includes assessing their current n8n version, patching vulnerable versions, and implementing additional security measures such as input validation and sanitization for SQL queries.

Technical summary

The CVE-2026-72750 vulnerability affects n8n versions before 1.123.67, 2.31.5, and 2.32.1. It is caused by the Snowflake node's Execute Query operation interpolating expression values directly into the SQL string, allowing for SQL injection when workflow authors embed untrusted, externally-controlled expression data directly in a raw SQL query. The fix involves adding an optional 'Query Parameters' field to bind values via positional placeholders, preventing SQL injection.

Defensive priority

Organizations using n8n should prioritize patching vulnerable versions to prevent potential SQL injection attacks.

Recommended defensive actions

• Inventory and assess n8n usage in your environment.
• Apply patches or updates to n8n versions prior to 1.123.67, 2.31.5, or 2.32.1.
• Implement compensating controls such as input validation and sanitization for SQL queries.
• Monitor for suspicious activity related to n8n workflows.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE-2026-72750 record indicates a SQL injection vulnerability in n8n's Snowflake node's Execute Query operation. The vulnerability allows for SQL injection when workflow authors embed untrusted, externally-controlled expression data directly in a raw SQL query. The fix adds an optional 'Query Parameters' field to bind values via positional placeholders. However, detailed information about affected versions and patching instructions is limited in the provided source corpus.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.