CVE-2026-54313

HighCVSS 7.7/10Last modified Oct 25, 2026

Description

n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user with workflow edit access could supply a malicious filter value in the MongoDB node's Find And Replace operation. The value was not validated before being passed to MongoDB as a query filter, allowing unintended documents to be matched and overwritten with attacker-controlled content. This vulnerability is fixed in 2.24.0.

Metrics

CVSS 3.1 7.7/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
n8n-io	n8n	< 2.24.0

References

https://github.com/n8n-io/n8n/security/advisories/GHSA-jpq7-226w-6cxxMitigation, Vendor Advisory

Timeline

Published: Jun 23, 2026
Last modified: Oct 25, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-543147.5n8n is an open source workflow automation platform. Prior to 2.24.0, the Compression node's Decompress operation expanded attacker-controlle CVE-2026-543169.1Claude Code is an agentic coding tool. From 0.2.54 until 2.1.163, because the hostname huggingface.co was pre-approved as a bare hostname f CVE-2026-543177.6Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2026.6.0, the Konnected integrati CVE-2026-543187.1Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2026.5.3, the LocationSensorManag CVE-2026-543194.2Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.186, a sandbox volume CVE-2026-543208.4Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.184.0, organization i CVE-2026-543217.0Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. From 0.101.0 until 0.184.0, sand CVE-2026-543227.7Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0, Daytona's orga CVE-2026-543235.9Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0, the daemon's g CVE-2026-543246.5Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0, a cross-tenant CVE-2026-543254.4Pi is a minimal terminal coding harness. Pi before 0.79.0 loaded project-local configuration and resources from a repository's .pi directory CVE-2026-543262.5Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi HTML exports render session Markdown into a static HTML file. It did n