An unescaped parameter interpolation issue exists in the SendGrid, Freshservice, and ServiceNow nodes. This allows attackers to bypass filters by breaking out of query literals. By binding vulnerable node parameters to untrusted external input, an attacker can expand single-record lookups into match-all queries, potentially exposing bulk data such as contact lists, tickets, and directory entries.