Live › vulnerability › CVE-2026-119557
n8n versions 2.14.0 through 2.46.3 have a path traversal flaw in the Databricks node that lets unauthenticated users reach arbitrary Databricks API endpoints. An attacker can use crafted webhook, chat or form input to read secrets using the stored Databricks credential.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 12:30 UTC. All times on this page are UTC.
Teams running self-hosted n8n in the 2.14.0 to 2.46.3 range that have workflows using the Databricks node fed by public webhook, chat or form inputs. Instances without Databricks nodes or without publicly reachable triggers are less exposed. The sources do not state more detail.
No product ranges from the sources yet.
n8n --version or in the n8n UI settings and see whether it falls in 2.14.0 through 2.46.3.2.46.3; the exact fixed version is unknown from the sources.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
n8n from 2.14.0 through 2.46.3 contains a path traversal vulnerability in the Databricks node that allows unauthenticated attackers to reach arbitrary Databricks API endpoints by injecting unencoded resource identifiers. Attackers can supply ../ sequences and query strings via webhook, chat, or form inputs mapped to spaceId, indexName, or filePath to read secrets using the stored credential.
This page as .md · .json · in your agent: get_signal("CVE-2026-119557")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.