CVE-2026-72775 n8n-io CVE debrief

Who should care

Users of n8n before 1.123.67, 2.31.5, and 2.32.1 who have the PostgresTrigger node configured should be aware of this vulnerability. Additionally, administrators and security teams responsible for the security of n8n installations should prioritize patching to prevent potential SQL injection attacks.

Technical summary

The CVE-2026-72775 vulnerability exists in the PostgresTrigger node of n8n before 1.123.67, 2.31.5, and 2.32.1. An authenticated user can inject arbitrary SQL executed against the connected PostgreSQL database with the configured credential's privileges, allowing full read and write access. The vulnerability has a CVSS score of 5.8 and is classified as MEDIUM severity. This SQL injection vulnerability can be exploited by authenticated users with access to the PostgresTrigger node, potentially leading to unauthorized database access and modifications. To mitigate this vulnerability, users should patch n8n to version 1.123.67, 2.31.5, or 2.32.1, or later, and restrict access to the PostgresTrigger node to only necessary users.

Defensive priority

Authenticated users with access to the PostgresTrigger node in n8n before 1.123.67, 2.31.5, and 2.32.1 should prioritize patching due to the MEDIUM severity of this SQL injection vulnerability.

Recommended defensive actions

• Patch n8n to version 1.123.67, 2.31.5, or 2.32.1, or later
• Restrict access to the PostgresTrigger node to only necessary users
• Monitor database activity for suspicious queries
• Consider implementing additional security controls, such as a Web Application Firewall (WAF)
• Inventory and verify the version of n8n in use

Evidence notes

The CVE-2026-72775 SQL injection vulnerability exists in the PostgresTrigger node of n8n before 1.123.67, 2.31.5, and 2.32.1. Authenticated users can inject arbitrary SQL, potentially leading to full read and write access to the connected PostgreSQL database. Evidence is based on official CVE and NVD records, as well as advisories from the vendor and Vulncheck.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.