CVE-2026-54687

n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n.

N8N-Node-Sqlite3

n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/SqliteNode/v1/SqliteV1.node.ts exposes the db_path database file path as a node parameter that permits data expressions from upstream workflow input. A workflow author who maps untrusted input to db_path can allow a remote attacker to select which SQLite file the n8n process opens, enabling traversal outside the intended database location and potentially reading, creating, or…

27. Aug 2026

Ausgewertete Quellen

• NVD
  CVE-2026-54687
• GitHub
  https://github.com/DangerBlack/n8n-node-sqlite3/security/advisories/GHSA-q7m3-rhxg-7vxr