AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

GHSA-652q-gvq3-74qv: n8n: Snowflake Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation

mediumvulnerability

security

Source: GitHub Advisory DatabaseJuly 22, 2026

Summary

n8n's Snowflake node had a SQL injection vulnerability (a type of attack where malicious SQL code is inserted into queries) because it directly inserted expression values into SQL strings instead of using safer methods. This only affects workflows where untrusted data is embedded directly in raw SQL queries.

Solution / Mitigation

The issue has been fixed in n8n versions 1.123.67, 2.31.5, and 2.32.1. Users should upgrade to one of these versions or later. The fix introduces an optional "Query Parameters" field that allows values to be bound via positional placeholders rather than interpolated into the query string. If upgrading is not immediately possible, temporary mitigations include: restrict workflow creation and editing permissions to fully trusted users only; audit existing workflows using the Snowflake executeQuery operation to ensure no expression resolving to externally-controlled data is embedded directly in a raw SQL query string; and restrict network access to any webhook or trigger endpoints that feed data into Snowflake executeQuery nodes. These workarounds do not fully remediate the risk and should only be used as short-term measures.