CVE-2026-77070 | n8n-io n8n prior 1.123.69/2.33.4/2.34.1 MongoDB node Query data query logic injection

A vulnerability was found in n8n-io n8n. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the component MongoDB node. Performing a manipulation of the argument Query results in improper neutralization of special elements in data query logic.

This vulnerability is reported as CVE-2026-77070. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More