CVE-2026-103250 | n8n-io n8n up to 1.123.79/2.39.5/2.40.0 Chat Memory sessionId sql injection

October 1, 2026 Yanac

A vulnerability has been found in n8n-io n8n up to 1.123.79/2.39.5/2.40.0 and classified as critical. The affected element is an unknown function of the component Chat Memory. The manipulation of the argument sessionId leads to sql injection.

This vulnerability is listed as CVE-2026-103250. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More