CVE-2026-110840 | n8n-io n8n up to 2.41.3/2.42.0 Microsoft SQL Node sql injection

October 15, 2026 Yanac

A vulnerability marked as critical has been reported in n8n-io n8n up to 2.41.3/2.42.0. Impacted is an unknown function of the component Microsoft SQL Node. This manipulation causes sql injection.

This vulnerability appears as CVE-2026-110840. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More