What is GHSA-5rg2-crf7-v5ww?

GHSA-5rg2-crf7-v5ww is a security advisory published by GitHub Security Advisories with Medium severity. n8n before 2.43.5, 2.44.x before 2.44.1, and 3.x before 3.0.1 contains an SQL injection...

Which CVE IDs does GHSA-5rg2-crf7-v5ww cover?

GHSA-5rg2-crf7-v5ww covers the following CVE IDs: CVE-2026-126381. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5rg2-crf7-v5ww?

GHSA-5rg2-crf7-v5ww has a CVSS v3 base score of 6.3, published by GitHub Security Advisories.

GHSA-5rg2-crf7-v5wwMediumCVSS 6.3

n8n before 2.43.5, 2.44.x before 2.44.1, and 3.x before 3.0.1 contains an SQL injection...

Vendor

GitHub Security Advisories

Published

November 13, 2026

Last Modified

November 13, 2026

🔗 CVE IDs covered (1)

CVE-2026-126381 →

📋 Description

n8n before 2.43.5, 2.44.x before 2.44.1, and 3.x before 3.0.1 contains an SQL injection vulnerability in the Vector Store (OracleDB) node, which does not validate Metadata Filter keys used in vector search queries. Attackers can supply crafted filter keys through untrusted workflow input such as webhooks to read data accessible to the configured Oracle credential.

🔗 References (4)

https://github.com/n8n-io/n8n/security/advisories/GHSA-2x68-96jw-5r6c
https://nvd.nist.gov/vuln/detail/CVE-2026-126381
https://www.vulncheck.com/advisories/n8n-before-2.44.1-sql-injection-via-vector-store-oracledb-metadata-filter-key
https://github.com/advisories/GHSA-5rg2-crf7-v5ww