GHSA-X6P3-M6H9-FX7R高危已审查

n8n: Microsoft SQL Node Prototype Pollution

OSV 1.4.0 · github-reviewed · 修改于 2026-07-20 21:39

发布时间

2026-06-17 06:38

GitHub 审查时间

2026-06-17 06:38

NVD 发布时间

2026-06-24 00:17

源文件

advisories/github-reviewed/2026/06/GHSA-x6p3-m6h9-fx7r/GHSA-x6p3-m6h9-fx7r.json

公告说明

Impact

An authenticated user with permission to create or modify workflows could achieve global prototype pollution via the Microsoft SQL node by supplying a crafted value as the table parameter. This pollutes Object.prototype process-wide for the lifetime of the n8n server process, causing application-wide validation failures and rendering the n8n instance completely non-functional until restarted.

Patches

The issue has been fixed in n8n version 2.24.0. Users should upgrade to this version or later to remediate the vulnerability.

Workarounds

If upgrading is not immediately possible, administrators should consider the following temporary mitigations:

Limit workflow creation and editing permissions to fully trusted users only.
Disable the Microsoft SQL node by adding n8n-nodes-base.microsoftSql to the NODES_EXCLUDE environment variable.

These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.

受影响的软件包

npm

n8n

标识信息

别名 / CVE

CVE-2026-54312

CWE

CWE-1321

软件生态

npm

扩展资料

暂无扩展资料。

CVSS 评分

CVSS_V3

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H

CVSS_V4

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N

原始 OSV JSON

{
  "id": "GHSA-x6p3-m6h9-fx7r",
  "aliases": [
    "CVE-2026-54312"
  ],
  "details": "## Impact\nAn authenticated user with permission to create or modify workflows could achieve global prototype pollution via the Microsoft SQL node by supplying a crafted value as the table parameter. This pollutes `Object.prototype` process-wide for the lifetime of the n8n server process, causing application-wide validation failures and rendering the n8n instance completely non-functional until restarted.\n\n## Patches\nThe issue has been fixed in n8n version 2.24.0. Users should upgrade to this version or later to remediate the vulnerability.\n\n## Workarounds\nIf upgrading is not immediately possible, administrators should consider the following temporary mitigations:\n- Limit workflow creation and editing permissions to fully trusted users only.\n- Disable the Microsoft SQL node by adding `n8n-nodes-base.microsoftSql` to the `NODES_EXCLUDE` environment variable.\n\nThese workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.",
  "summary": "n8n: Microsoft SQL Node Prototype Pollution",
  "affected": [
    {
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.24.0"
            }
          ]
        }
      ],
      "package": {
        "name": "n8n",
        "ecosystem": "npm"
      }
    }
  ],
  "modified": "2026-07-20T13:39:38Z",
  "severity": [
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H"
    },
    {
      "type": "CVSS_V4",
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N"
    }
  ],
  "published": "2026-06-16T22:38:52Z",
  "references": [
    {
      "url": "https://github.com/n8n-io/n8n/security/advisories/GHSA-x6p3-m6h9-fx7r",
      "type": "WEB"
    },
    {
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54312",
      "type": "ADVISORY"
    },
    {
      "url": "https://github.com/n8n-io/n8n",
      "type": "PACKAGE"
    }
  ],
  "schema_version": "1.4.0",
  "database_specific": {
    "cwe_ids": [
      "CWE-1321"
    ],
    "severity": "HIGH",
    "github_reviewed": true,
    "nvd_published_at": "2026-06-23T16:17:02Z",
    "github_reviewed_at": "2026-06-16T22:38:52Z"
  }
}