CVE-2026-103248

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.80 n8n versions 2.0.0 through 2.39.5 n8n versions 2.40.0

Description A filter injection issue exists in the Supabase node when using the Filters (String) mode due to a failure to escape field values. This allows attackers to inject filter expressions via untrusted input, potentially enabling them to read all table rows, update all records, or delete entire tables within a single request.

Recommendations Update to version 1.123.80 or later. Update to version 2.39.6 or later. Update to version 2.40.1 or later.