9.4

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-27497

CVE-2026-27497: n8n has Potential Remote Code Execution via Merge Node

n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could leverage the Merge node's SQL query mode to execute arbitrary code and write arbitrary files on the n8n server. The issues have been fixed in n8n versions 2.10.1, 2.9.3, and 1.123.22. Users should upgrade to one of these versions or later to remediate all known vulnerabilities. If upgrading is not immediately possible, administrators should consider the following temporary mitigations. Limit workflow creation and editing permissions to fully trusted users only, and/or disable the Merge node by adding n8n-nodes-base.merge to the NODES_EXCLUDE environment variable. These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-27497

CVE-2026-27497:

9.4

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
n8n	npm	< 1.123.22	1.123.22
n8n	npm	>= 2.0.0, < 2.9.3	2.9.3
n8n	npm	>= 2.10.0, < 2.10.1	2.10.1

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the Merge node's SQL query mode, which uses the alasql library to execute user-provided SQL queries. The alasql library, by default, has features that can be abused for remote code execution, such as reading and writing files, and requiring modules. The patch addresses this by introducing a series of security measures within the packages/nodes-base/nodes/Merge/v3/actions/mode/combineBySql.ts file. The main vulnerable function is execute, as it is the entry point for processing the user's SQL query. The patch modifies this function to no longer use a raw alasql instance. Instead, it calls a new loadAlaSql function. This function, in turn, calls disableUnsafeAccess and freezeAlasql to create a sandboxed version of alasql with dangerous features disabled. Therefore, any runtime profile of an exploitation attempt would have the execute function in its stack trace, as it is the function that orchestrates the execution of the malicious query.

Vulnerable functions

execute

packages/nodes-base/nodes/Merge/v3/actions/mode/combineBySql.ts

The `execute` function in the Merge node's SQL mode is vulnerable to remote code execution. It uses the `alasql` library to execute user-provided SQL queries. Before the patch, `alasql` was used without disabling its unsafe features, such as file access (`FILE`, `JSON`, `CSV`, etc. handlers) and the `REQUIRE` statement, which could be used to execute arbitrary code. The patch secures the `alasql` instance by disabling these features before executing the query.

disableUnsafeAccess

packages/nodes-base/nodes/Merge/v3/actions/mode/combineBySql.ts

This is a mitigation function introduced by the patch. It is responsible for disabling various unsafe features of the `alasql` library, such as file access handlers (`FROM FILE`, `INTO FILE`), file system utility functions (`loadFile`, `saveFile`), and the `REQUIRE` statement. This function is a key part of the fix that prevents the remote code execution vulnerability.

loadAlaSql

packages/nodes-base/nodes/Merge/v3/actions/mode/combineBySql.ts

This is a mitigation function introduced by the patch. It acts as a factory for a secured `alasql` instance. It ensures that whenever `alasql` is used, it is first sanitized by disabling unsafe features. The `execute` function calls this function to get a safe `alasql` instance.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.