{"schema":"threatline.record/2","record":{"id":"GHSA-2x68-96jw-5r6c","aliases":["GHSA-2x68-96jw-5r6c"],"summary":"SQL Injection via Metadata Filter Key in the Vector Store (OracleDB) Node","details":"## Impact\n\nThe Vector Store (OracleDB) node did not validate Metadata Filter keys, allowing SQL injection into the vector search query. In workflows where untrusted input (e.g., from a webhook) is passed into the filter key, an attacker could read data accessible to the configured Oracle credential.\n\n## Patches\n\nThe issue has been fixed in n8n versions 2.44.1, 2.43.5 and 3.0.1. Users should upgrade to one of these versions or later to remediate the vulnerability.\n\n## Workarounds\n\nIf upgrading is not immediately possible, administrators should consider the following temporary mitigations:\n- Restrict n8n instance access to fully trusted users only.\n- Audit active workflows that use the Vector Store (OracleDB) node and ensure the Metadata Filter Name field does not incorporate untrusted external data via expressions.\n- Apply network-level controls to restrict access to webhook endpoints that feed into these workflows.\n- Deactivate affected workflows until the instance is patched.\n\nThese workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.","categories":["Frameworks"],"product":"n8n","vendor":"","ecosystem":null,"affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-2x68-96jw-5r6c","source_modified_at":"2026-10-28T08:48:57Z","fetched_at":"2026-10-28T15:55:58.673066Z","package":{"ecosystem":"npm","name":"n8n"},"range":"< 2.44.1"},{"source":"GitHub Advisory Database","source_url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-2x68-96jw-5r6c","source_modified_at":"2026-10-28T08:48:57Z","fetched_at":"2026-10-28T15:55:58.673066Z","package":{"ecosystem":"npm","name":"n8n"},"range":"< 2.43.5"},{"source":"GitHub Advisory Database","source_url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-2x68-96jw-5r6c","source_modified_at":"2026-10-28T08:48:57Z","fetched_at":"2026-10-28T15:55:58.673066Z","package":{"ecosystem":"npm","name":"n8n"},"range":"< 3.0.1"}],"fixed_versions":[],"cvss":4.9,"severity":"Medium","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-28T08:48:57Z","modified_at":"2026-10-28T08:48:57Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-2x68-96jw-5r6c","fetched_at":"2026-10-28T15:55:58.673066Z","source_modified_at":"2026-10-28T08:48:57Z"}],"sources":["GitHub Advisory Database"],"references":[],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-28T08:48:57Z","content_hash":"347b5f66d5c43c9d3e5e3d680d34f50fbb861295e526b9b0fae0bc34ffeb14fd"}}