{"id":"CVE-2026-118641","kind":"vulnerability","aliases":["CVE-2026-118641"],"related":[],"title":"n8n: OData filter injection in Outlook and SharePoint nodes exposes contacts","description":"n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains an OData $filter injection vulnerability in the Microsoft Outlook contact lookup and Microsoft SharePoint v1 item update nodes, which build $filter string literals from expression-bindable parameters without escaping. Attackers who supply untrusted input to such workflows can inject single quotes to dump the bound mailbox's entire contact list or redirect SharePoint writes onto unintended list items within the stored credential's scope.","summary":"n8n builds OData $filter strings from workflow parameters without escaping in the Microsoft Outlook contact lookup and SharePoint v1 item update nodes. An attacker who controls input to those workflows can inject single quotes to read the whole contact list of the mailbox or redirect SharePoint writes to unintended list items within the stored credential's scope.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-tooling","microsoft-outlook","n8n","self-hosted","sharepoint","workflow-automation"],"not_affected_if":["no-outlook-or-sharepoint-nodes","patched-version","static-parameters"],"how_to_check":"- Check the n8n version with `n8n --version` or the Docker image tag; affected builds are below `1.123.85`, below `2.43.5`, and `2.44.x` below `2.44.1`.\n- Look for workflows that use the Microsoft Outlook contact lookup or the Microsoft SharePoint v1 item update nodes with expression-bound parameters fed from untrusted input.","fix":"- Upgrade n8n to `1.123.85`, `2.43.5`, or `2.44.1` depending on the release line in use.\n- Until upgraded, remove untrusted expression input from Outlook contact lookup and SharePoint item update parameters and rotate the Microsoft credentials used by those nodes if exposure is suspected.","status":"open","published_at":"2026-10-28T19:17:31+00:00","first_seen_at":"2026-10-28T19:34:55+00:00","triaged_at":"2026-10-28T19:36:01+00:00","updated_at":"2026-10-28T19:36:01+00:00","category":"ai-tooling","confidence":0.7,"triage":{"at":"2026-10-28T19:36:01Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade n8n to `1.123.85`, `2.43.5`, or `2.44.1` depending on the release line in use.\n- Until upgraded, remove untrusted expression input from Outlook contact lookup and SharePoint item update parameters and rotate the Microsoft credentials used by those nodes if exposure is suspected.","reach":"internet","title":"n8n: OData filter injection in Outlook and SharePoint nodes exposes contacts","impact":"medium","summary":"n8n builds OData $filter strings from workflow parameters without escaping in the Microsoft Outlook contact lookup and SharePoint v1 item update nodes. An attacker who controls input to those workflows can inject single quotes to read the whole contact list of the mailbox or redirect SharePoint writes to unintended list items within the stored credential's scope.","category":"ai-tooling","nicknames":[],"who_cares":["n8n","self-hosted","microsoft-outlook","sharepoint","workflow-automation"],"confidence":0.7,"needs_auth":"unknown","worst_case":"Attacker reads mailbox contacts and overwrites SharePoint list items.","analyst_note":"Check the NVD entry and the n8n GitHub security advisory for the exact affected node versions, whether untrusted input must come from an authenticated user, and the exact remediation for the 2.44.x line.","how_to_check":"- Check the n8n version with `n8n --version` or the Docker image tag; affected builds are below `1.123.85`, below `2.43.5`, and `2.44.x` below `2.44.1`.\n- Look for workflows that use the Microsoft Outlook contact lookup or the Microsoft SharePoint v1 item update nodes with expression-bound parameters fed from untrusted input.","needs_analyst":true,"not_affected_if":["patched-version","no-outlook-or-sharepoint-nodes","static-parameters"],"who_is_affected":"Teams that self-host or use n8n with Microsoft Outlook or SharePoint nodes whose parameters are filled from data an outsider can influence, such as form submissions, webhooks, or inbound emails. Workflows that only use these nodes with fixed, internally controlled values have a much smaller exposure, and instances on the patched versions are not affected.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000748,"input_tokens":3413,"output_tokens":814,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-118641':14A,17A '-2026':13A,16A '1.123.85':91C '2':92C '2.43.5':95C '2.44':97C '2.44.1':100C 'ai':19B 'ai-tool':18B 'attack':55B,132C 'autom':31B 'bindabl':128C 'bound':147C 'build':33B,121C 'contact':11A,46B,70B,111C,151C 'contain':101C 'control':57B 'credenti':86B,164C 'cve':12A,15A 'dump':145C 'entir':150C 'escap':41B,131C 'expos':10A 'express':127C 'expression-bind':126C 'filter':3A,35B,104C,122C 'host':27B 'inject':4A,63B,105C,141C 'input':58B,136C 'item':51B,82B,117C,160C 'list':71B,81B,152C,159C 'liter':124C 'lookup':47B,112C 'mailbox':74B,148C 'microsoft':22B,44B,109C,114C 'microsoft-outlook':21B 'n8n':1A,24B,32B,89C 'node':9A,53B,119C 'odata':2A,34B,103C 'onto':157C 'outlook':6A,23B,45B,110C 'paramet':39B,129C 'quot':65B,143C 'read':67B 'redirect':76B,154C 'scope':88B,166C 'self':26B 'self-host':25B 'sharepoint':8A,28B,49B,77B,115C,155C 'singl':64B,142C 'store':85B,163C 'string':36B,123C 'suppli':134C 'tool':20B 'unintend':80B,158C 'untrust':135C 'updat':52B,118C 'v1':50B,116C 'vulner':106C 'whole':69B 'within':83B,161C 'without':40B,130C 'workflow':30B,38B,61B,139C 'workflow-autom':29B 'write':78B,156C 'x':93C,98C","nicknames":[],"mitigations":[],"who_affected":"Teams that self-host or use n8n with Microsoft Outlook or SharePoint nodes whose parameters are filled from data an outsider can influence, such as form submissions, webhooks, or inbound emails. Workflows that only use these nodes with fixed, internally controlled values have a much smaller exposure, and instances on the patched versions are not affected.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T19:17:31+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118641","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118641","severity":null,"published_at":"2026-10-28T19:17:31+00:00","modified_at":"2026-10-28T19:17:32+00:00","first_seen_at":"2026-10-28T19:34:55+00:00","fetched_at":"2026-10-28T19:34:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}