GHSA-65mv-v8rp-54wc: n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where Parameter

Published Oct 28, 2026

Updated

n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a filter injection vulnerability in the Quick Base node, which sends the Where filter to the Quick Base API as raw query text. Attackers supplying untrusted input such as webhook data used to build the filter can make Get Many return every record or Delete remove every record with the workflow credential's privileges.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade n8n to a version that resolves this vulnerability.
Fixed in 1.123.85
Upgrade
Upgrade n8n to a version that resolves this vulnerability.
Fixed in 2.43.5
Upgrade
Upgrade n8n to a version that resolves this vulnerability.
Fixed in 2.44.1

Event History

Oct 28, 2026

CVE Published

via OSV·06:59 PM

Data Sourced

via OSV·06:59 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which workflows are exposed to this issue?

Workflows that use the Quick Base node and construct its Where filter from untrusted input, such as webhook data, are exposed. The impact is limited by the privileges of the Quick Base credential used by that workflow.

What can an attacker do if they can control filter input?

An attacker can inject raw query text into the Where filter. This can cause Get Many operations to return every record or Delete operations to remove every record accessible through the workflow credential.

Are workflows safe if they do not place untrusted data into the Where filter?

The described attack requires untrusted input to be used when building the Where filter. The provided information does not identify other Quick Base node fields or workflows without such input as affected.

Which releases contain fixes?

The issue is addressed in n8n 1.123.85, 2.43.5, and 2.44.1. Affected releases are versions before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1.

GHSA-65mv-v8rp-54wc: n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where Parameter

Remediation

Event History

Frequently Asked Questions

Which workflows are exposed to this issue?

What can an attacker do if they can control filter input?

Are workflows safe if they do not place untrusted data into the Where filter?

Which releases contain fixes?

Company

Resources

Contact

Frequently Asked Questions

Which workflows are exposed to this issue?

What can an attacker do if they can control filter input?

Are workflows safe if they do not place untrusted data into the Where filter?

Which releases contain fixes?