{"id":"CVE-2026-118645","kind":"vulnerability","aliases":["CVE-2026-118645"],"related":[],"title":"n8n: Quick Base node filter injection lets attackers read or delete all records","description":"n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a filter injection vulnerability in the Quick Base node, which sends the Where filter to the Quick Base API as raw query text. Attackers supplying untrusted input such as webhook data used to build the filter can make Get Many return every record or Delete remove every record with the workflow credential's privileges.","summary":"n8n's Quick Base node sends the Where filter to the Quick Base API as raw query text, so untrusted input such as webhook data can alter the filter. An attacker can make Get Many return every record or Delete remove every record, using the workflow credential's privileges.","severity":"high","cvss":8.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-tooling","n8n","quick-base","self-hosted","workflow-automation"],"not_affected_if":["fixed-filter-values","not-using-quick-base-node","patched-version"],"how_to_check":"- Check the n8n version with `n8n --version` and compare it to the fixed releases in the fix section.\n- Look for workflows that use the Quick Base node with Get Many or Delete and build the Where filter from webhook or other external input.","fix":"- Upgrade n8n to `1.123.85` on the 1.x line, `2.43.5` on the 2.x line, or `2.44.1` on the 2.44.x line.\n- Until upgraded, avoid putting untrusted input into Quick Base Where filters.","status":"open","published_at":"2026-10-28T19:17:32+00:00","first_seen_at":"2026-10-28T19:34:55+00:00","triaged_at":"2026-10-28T19:35:46+00:00","updated_at":"2026-10-28T19:35:46+00:00","category":"ai-tooling","confidence":0.6,"triage":{"at":"2026-10-28T19:35:46Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade n8n to `1.123.85` on the 1.x line, `2.43.5` on the 2.x line, or `2.44.1` on the 2.44.x line.\n- Until upgraded, avoid putting untrusted input into Quick Base Where filters.","reach":"internet","title":"n8n: Quick Base node filter injection lets attackers read or delete all records","impact":"high","summary":"n8n's Quick Base node sends the Where filter to the Quick Base API as raw query text, so untrusted input such as webhook data can alter the filter. An attacker can make Get Many return every record or Delete remove every record, using the workflow credential's privileges.","category":"ai-tooling","nicknames":[],"who_cares":["n8n","self-hosted","quick-base","workflow-automation"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Attacker reads or deletes all Quick Base records using workflow credentials.","analyst_note":"Confirm from the NVD entry or n8n advisory whether the webhook trigger is the only untrusted path and whether unauthenticated requests can reach it.","how_to_check":"- Check the n8n version with `n8n --version` and compare it to the fixed releases in the fix section.\n- Look for workflows that use the Quick Base node with Get Many or Delete and build the Where filter from webhook or other external input.","needs_analyst":true,"not_affected_if":["not-using-quick-base-node","fixed-filter-values","patched-version"],"who_is_affected":"Teams running self-hosted or cloud n8n on an affected version whose workflows use the Quick Base node and pass untrusted data, such as webhook payloads, into the Where filter. Workflows that do not use Quick Base, or that only use fixed values for the filter, are not exposed by this flaw.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000665,"input_tokens":3366,"output_tokens":656,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-118645':16A,19A '-2026':15A,18A '1.123.85':84C '2':85C '2.43.5':88C '2.44':90C '2.44.1':93C 'ai':21B 'ai-tool':20B 'alter':59B 'api':46B,113C 'attack':8A,63B,118C 'autom':32B 'base':3A,26B,36B,45B,102C,112C 'build':128C 'contain':94C 'credenti':79B,146C 'cve':14A,17A 'data':57B,125C 'delet':11A,72B,139C 'everi':69B,74B,136C,141C 'filter':5A,41B,61B,96C,108C,130C 'get':66B,133C 'host':29B 'inject':6A,97C 'input':53B,121C 'let':7A 'make':65B,132C 'mani':67B,134C 'n8n':1A,23B,33B,82C 'node':4A,37B,103C 'privileg':81B,148C 'queri':49B,116C 'quick':2A,25B,35B,44B,101C,111C 'quick-bas':24B 'raw':48B,115C 'read':9A 'record':13A,70B,75B,137C,142C 'remov':73B,140C 'return':68B,135C 'self':28B 'self-host':27B 'send':38B,105C 'suppli':119C 'text':50B,117C 'tool':22B 'untrust':52B,120C 'use':76B,126C 'vulner':98C 'webhook':56B,124C 'workflow':31B,78B,145C 'workflow-autom':30B 'x':86C,91C","nicknames":[],"mitigations":[],"who_affected":"Teams running self-hosted or cloud n8n on an affected version whose workflows use the Quick Base node and pass untrusted data, such as webhook payloads, into the Where filter. Workflows that do not use Quick Base, or that only use fixed values for the filter, are not exposed by this flaw.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T19:17:32+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118645","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118645","severity":null,"published_at":"2026-10-28T19:17:32+00:00","modified_at":"2026-10-28T19:17:32+00:00","first_seen_at":"2026-10-28T19:34:55+00:00","fetched_at":"2026-10-28T19:34:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}