{"schema":"threatline.record/2","record":{"id":"GHSA-5qpp-pqww-h7fp","aliases":["GHSA-5qpp-pqww-h7fp"],"summary":"SQL Injection in the Microsoft SQL Node via Expression Interpolation into the Query Field","details":"## Impact\n\nVersion 1 of the Microsoft SQL node resolves an expression in the Query field by substituting the value into the SQL text and executing the result, with no parameterisation. Where a workflow binds untrusted input into that field, an external caller can execute arbitrary SQL against the connected database with the stored credential's privileges.\n\n## Patches\n\nThe issue has been fixed in n8n versions 2.42.1 and 2.41.4. Users should upgrade to one of these versions or later to remediate the vulnerability.\n\n## Workarounds\n\nIf upgrading is not immediately possible, administrators should consider the following temporary mitigations:\n- Restrict n8n instance access to fully trusted users only.\n- Audit all workflows using the Microsoft SQL node and ensure that the Query field is not bound to expressions referencing untrusted external input such as webhook or HTTP request fields.\n- Deactivate webhook-triggered workflows that pass external input into a Microsoft SQL node's Query field until the instance is patched.\n- Where the node must remain in use, upgrade the node to typeVersion 1.1 or later by removing and re-adding it, then move dynamic values into the Query Parameters option and reference them as positional parameters.","categories":["Frameworks"],"product":"n8n","vendor":"","ecosystem":null,"affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-5qpp-pqww-h7fp","source_modified_at":"2026-09-30T08:35:19Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"n8n"},"range":"< 2.42.1"},{"source":"GitHub Advisory Database","source_url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-5qpp-pqww-h7fp","source_modified_at":"2026-09-30T08:35:19Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"n8n"},"range":"< 2.41.4"}],"fixed_versions":[],"cvss":7,"severity":"High","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-09-30T08:35:19Z","modified_at":"2026-09-30T08:35:19Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-5qpp-pqww-h7fp","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-09-30T08:35:19Z"}],"sources":["GitHub Advisory Database"],"references":[],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-09-30T08:35:19Z","content_hash":"17090227408f9d3f9408264c77367789e6f4d1facd16696915e92def84424d43"}}