CVE-2026-77080

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.69 n8n versions 2.x prior to 2.33.4 n8n versions 2.34.x prior to 2.34.1

Description The Snowflake node allows an authenticated user with valid Snowflake credentials to perform arbitrary file read and write operations. This occurs because the node passes free-form input from the Execute Query field, including client-side commands, directly to the Snowflake SDK without enforcing file-access restrictions. Consequently, an attacker can upload local files from the n8n host or overwrite existing files using a staged file.

Recommendations Update n8n to version 1.123.69 or later. Update n8n 2.x to version 2.33.4 or later. Update n8n 2.34.x to version 2.34.1 or later.