n8n security advisory (AV26-1044)

Serial number: AV26-1044
Date: October 15, 2026

As of October 14, 2026, n8n is affected by vulnerabilities in the following product:

• n8n
  • Prior to 1.123.83
  • Prior to 2.41.4
  • Prior to 2.42.1

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• SQL Injection in the Microsoft SQL Node via Expression Interpolation into the Query Field Advisory
• Shared-Workflow Credential Check Misses Nested and Tool Inline Sub-Workflows
• Overview - n8n-io/n8n