DangerBlack CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM DangerBlack CVE published 2026-08-27

CVE-2026-54687

CVE-2026-54687 debrief based on CVE Program and NVD records. The n8n-nodes-sqlite3 node for n8n exposes the SQLite database file path as a node parameter, allowing data expressions from upstream workflow input. This enables a remote attacker to select which SQLite file the n8n process opens, potentially reading, creating, or overwriting files accessible to the process.