---
id: "CVE-2026-118645"
kind: "vulnerability"
aliases: ["CVE-2026-118645"]
title: "n8n: Quick Base node filter injection lets attackers read or delete all records"
severity: "high"
cvss: 8.7
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-tooling", "n8n", "quick-base", "self-hosted", "workflow-automation"]
not_affected_if: ["fixed-filter-values", "not-using-quick-base-node", "patched-version"]
published_at: "2026-10-28T19:17:32+00:00"
first_seen_at: "2026-10-28T19:34:55+00:00"
updated_at: "2026-10-28T19:35:46+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-118645", "first_seen_at": "2026-10-28T19:34:55+00:00"}]
---

# n8n: Quick Base node filter injection lets attackers read or delete all records

n8n's Quick Base node sends the Where filter to the Quick Base API as raw query text, so untrusted input such as webhook data can alter the filter. An attacker can make Get Many return every record or Delete remove every record, using the workflow credential's privileges.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the n8n version with `n8n --version` and compare it to the fixed releases in the fix section.
- Look for workflows that use the Quick Base node with Get Many or Delete and build the Where filter from webhook or other external input.

## Fix

- Upgrade n8n to `1.123.85` on the 1.x line, `2.43.5` on the 2.x line, or `2.44.1` on the 2.44.x line.
- Until upgraded, avoid putting untrusted input into Quick Base Where filters.

## Timeline

- 2026-10-28T19:34:55+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-118645

## From the sources

n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a filter injection vulnerability in the Quick Base node, which sends the Where filter to the Quick Base API as raw query text. Attackers supplying untrusted input such as webhook data used to build the filter can make Get Many return every record or Delete remove every record with the workflow credential's privileges.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_