PT-2026-82684 · Unknown · N8N-Node-Sqlite3
CVSS v4.0
6.1
Medium
| Vector | AV:N/AC:H/AT:P/PR:N/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
n8n-nodes-sqlite3 versions prior to 1.0.0
Description
The
nodes/SqliteNode/v1/SqliteV1.node.ts file exposes the db path parameter, which allows data expressions from upstream workflow input. If a workflow author maps untrusted input to this parameter, a remote attacker can control which SQLite file the process opens. This enables path traversal, allowing the attacker to read, create, or overwrite files accessible to the n8n process. This issue is particularly risky in multi-tenant or user-facing deployments where untrusted users can influence workflow configuration.Recommendations
Update n8n-nodes-sqlite3 to version 1.0.0.
Exploit
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
N8N-Node-Sqlite3