n8n has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode
Critical9.9CVE-2026-33660 · Published Mar 25, 2026 · updated Apr 12, 2026
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| n8n npm | >= 2.14.0, < 2.14.1 | 2.14.1 |
| >= 2.0.0-rc.0, < 2.13.3 | 2.13.3 | |
| < 1.123.27 | 1.123.27 |
Details and references
## Impact An authenticated user with permission to create or modify workflows could use the Merge node's "Combine by SQL" mode to read local files on the n8n host and achieve remote code execution. The AlaSQL sandbox did not sufficiently restrict certain SQL statements, allowing an attacker to access sensitive files on the server or even compromise the intance. ## Patches The issue has been fixed in n8n versions 2.14.1, 2.13.3, and 1.123.27. Users should upgrade to one of these versions or later to remediate the vulnerability. ## Workarounds If upgrading is not immediately possible, administrators should consider the following temporary mitigations: - Limit workflow creation and editing permissions to fully trusted users only. - Disable the Merge node by adding `n8n-nodes-base.merge` to the `NODES_EXCLUDE` environment variable. These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.
More n8n advisories
All n8n| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Mar 25 | n8n has In-Process Memory Disclosure in its Task Runner CVE-2026-27496High6.5fixed in 1.123.22, 2.9.3, 2.10.1 | High6.5 | 1.123.22, 2.9.3, 2.10.1 |
| Mar 25 | n8n is Vulnerable to Credential Theft via Name-Based Resolution and Permission Checker Bypass in Community Edition CVE-2026-33663High9.9fixed in 1.123.27, 2.13.3, 2.14.1 | High9.9 | 1.123.27, 2.13.3, 2.14.1 |
| Mar 25 | n8n: LDAP Email-Based Account Linking Allows Privilege Escalation and Account Takeover CVE-2026-33665High8.2fixed in 1.121.0, 2.4.0 | High8.2 | 1.121.0, 2.4.0 |
| Mar 25 | n8n Has Authorization Bypass in OAuth Callback via N8N_SKIP_AUTH_ON_OAUTH_CALLBACK CVE-2026-33720Medium4.7fixed in 2.8.0 | Medium4.7 | 2.8.0 |
| Mar 25 | n8n Has External Secrets Authorization Bypass in Credential Saving CVE-2026-33722High6.3fixed in 1.123.23, 2.6.4 | High6.3 | 1.123.23, 2.6.4 |
| Mar 25 | n8n's Source Control SSH Configuration Uses StrictHostKeyChecking=no CVE-2026-33724Medium5.4fixed in 2.5.0 | Medium5.4 | 2.5.0 |