High priorityDisclosed

Advisory · CVE-2026-118645

n8n Quick Base filter injection can dump or delete every record

The n8n Quick Base node sends the Where filter to the API as raw query text, so untrusted input can make Get Many return every record or Delete remove every record. Rated 8.7.

Advisory published October 28, 2026Independent summary
Vendor
n8n
Product
n8n
Identifier / CWE
CVE-2026-118645
CWE-943
Action timing
Immediate
ELI5

Explain it like I’m five

The filter box is pasted straight into the database question with no escaping. An attacker who controls part of the input can rewrite the question to mean every record instead of one.

SIMPLIFIED_ATTACK_PATH03 STEPS
  1. 01Untrusted input

    An attacker supplies untrusted input such as webhook data used to build the Quick Base filter.

  2. 02Raw filter sent

    The Quick Base node sends the Where filter to the API as raw query text.

  3. 03Full-table effect

    Get Many returns every record, or Delete removes every record, with the workflow credential's privileges.

What happened

n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a filter injection vulnerability in the Quick Base node, which sends the Where filter to the Quick Base API as raw query text. Attackers supplying untrusted input such as webhook data used to build the filter can make Get Many return every record or Delete remove every record with the workflow credential’s privileges. The CVSS 3.1 score is 8.7.

The worst case is not just data exposure: a Delete operation driven by the same injection can wipe a table, so teams should check both reads and writes in workflow logs for affected instances.

What to do

  1. Inventory n8n instances using the Quick Base node with untrusted input.
  2. Upgrade to 1.123.85, 2.43.5, or 2.44.1 on the matching release line.
  3. Review Quick Base workflows for webhook or external data feeding filters.
  4. Check Quick Base audit logs for bulk reads or mass deletions.
  5. Confirm the deployed version after patching.

Management note

Automation platforms amplify injection flaws: one workflow credential can read or delete an entire table. Any Quick Base workflow fed by webhooks deserves a log review alongside the upgrade.