{"id":"CVE-2026-126383","kind":"vulnerability","aliases":["CVE-2026-126383"],"related":[],"title":"n8n: MongoDB node lets crafted input overwrite unintended documents","description":"n8n before 1.123.89, 2.x before 2.45.5, 2.46.x before 2.46.1, and 3.x before 3.0.1 contains a NoSQL injection vulnerability in the MongoDB node's Update and Find And Replace operations due to insufficient validation of the update key value taken from incoming items. Attackers who can supply untrusted input, such as a webhook body, to a workflow using these operations can make the node match and overwrite unintended documents or insert new documents in the MongoDB database.","summary":"n8n's MongoDB node does not validate the update key taken from incoming workflow items, enabling a NoSQL injection in its Update and Find And Replace operations. An attacker who can supply input such as a webhook body can make the node match and overwrite unintended documents or insert new ones.","severity":"high","cvss":8.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-tooling","mongodb","n8n","self-hosted","webhooks"],"not_affected_if":["no-mongodb-node","no-untrusted-input","patched-version"],"how_to_check":"- Check the n8n version with `n8n --version` against the fixed ranges.\n- Look for workflows that use the MongoDB node's Update or Find And Replace operations and take input from webhooks or other untrusted sources.","fix":"- n8n `1.123.89` or later on the 1.x line\n- n8n `2.45.5` or later on the 2.x line\n- n8n `2.46.1` or later on the 2.46.x line\n- n8n `3.0.1` or later on the 3.x line","status":"open","published_at":"2026-11-13T10:17:41+00:00","first_seen_at":"2026-11-13T10:47:18+00:00","triaged_at":"2026-11-13T10:52:19+00:00","updated_at":"2026-11-13T10:52:19+00:00","category":"ai-tooling","confidence":0.8,"triage":{"at":"2026-11-13T10:52:19Z","model":"claude-haiku-5-5","output":{"fix":"- n8n `1.123.89` or later on the 1.x line\n- n8n `2.45.5` or later on the 2.x line\n- n8n `2.46.1` or later on the 2.46.x line\n- n8n `3.0.1` or later on the 3.x line","reach":"internet","title":"n8n: MongoDB node lets crafted input overwrite unintended documents","impact":"high","summary":"n8n's MongoDB node does not validate the update key taken from incoming workflow items, enabling a NoSQL injection in its Update and Find And Replace operations. An attacker who can supply input such as a webhook body can make the node match and overwrite unintended documents or insert new ones.","audience":"businesses","category":"ai-tooling","nicknames":[],"who_cares":["n8n","mongodb","self-hosted","webhooks"],"confidence":0.8,"fix_status":"available","needs_auth":"no","worst_case":"attacker overwrites or inserts documents in the MongoDB database","analyst_note":"","how_to_check":"- Check the n8n version with `n8n --version` against the fixed ranges.\n- Look for workflows that use the MongoDB node's Update or Find And Replace operations and take input from webhooks or other untrusted sources.","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":["no-mongodb-node","no-untrusted-input","patched-version"],"who_is_affected":"Teams running self-hosted or cloud n8n workflows that use the MongoDB node's Update or Find And Replace operations with data from untrusted input such as webhook bodies. Workflows that do not use those operations, or that do not feed untrusted input into them, are not exposed by this flaw.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000777,"input_tokens":4684,"output_tokens":617,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-126383':12A,15A '-2026':11A,14A '1.123.89':78C '2':79C '2.45.5':82C '2.46':83C '2.46.1':86C '3':88C '3.0.1':91C 'ai':17B 'ai-tool':16B 'attack':53B,121C 'bodi':62B,131C 'contain':92C 'craft':5A 'cve':10A,13A 'databas':154C 'document':9A,71B,146C,150C 'due':108C 'enabl':40B 'find':48B,104C 'host':23B 'incom':37B,119C 'inject':43B,95C 'input':6A,57B,126C 'insert':73B,148C 'insuffici':110C 'item':39B,120C 'key':34B,115C 'let':4A 'make':64B,139C 'match':67B,142C 'mongodb':2A,19B,27B,99C,153C 'n8n':1A,20B,25B,76C 'new':74B,149C 'node':3A,28B,66B,100C,141C 'nosql':42B,94C 'one':75B 'oper':51B,107C,137C 'overwrit':7A,69B,144C 'replac':50B,106C 'self':22B 'self-host':21B 'suppli':56B,124C 'taken':35B,117C 'tool':18B 'unintend':8A,70B,145C 'untrust':125C 'updat':33B,46B,102C,114C 'use':135C 'valid':31B,111C 'valu':116C 'vulner':96C 'webhook':24B,61B,130C 'workflow':38B,134C 'x':80C,84C,89C","nicknames":[],"mitigations":[],"who_affected":"Teams running self-hosted or cloud n8n workflows that use the MongoDB node's Update or Find And Replace operations with data from untrusted input such as webhook bodies. Workflows that do not use those operations, or that do not feed untrusted input into them, are not exposed by this flaw.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["aitooling","high","mongodb","n8n","selfhosted","webhooks"],"campaign_type":null,"search_a":"'-126383':12A,15A '-2026':11A,14A 'craft':5A 'cve':10A,13A 'document':9A 'input':6A 'let':4A 'mongodb':2A 'n8n':1A 'node':3A 'overwrit':7A 'unintend':8A","search_b":"'ai':17B 'ai-tool':16B 'attack':53B 'bodi':62B 'document':71B 'enabl':40B 'find':48B 'host':23B 'incom':37B 'inject':43B 'input':57B 'insert':73B 'item':39B 'key':34B 'make':64B 'match':67B 'mongodb':19B,27B 'n8n':20B,25B 'new':74B 'node':28B,66B 'nosql':42B 'one':75B 'oper':51B 'overwrit':69B 'replac':50B 'self':22B 'self-host':21B 'suppli':56B 'taken':35B 'tool':18B 'unintend':70B 'updat':33B,46B 'valid':31B 'webhook':24B,61B 'workflow':38B","search_c":"'1.123.89':78C '2':79C '2.45.5':82C '2.46':83C '2.46.1':86C '3':88C '3.0.1':91C 'attack':121C 'bodi':131C 'contain':92C 'databas':154C 'document':146C,150C 'due':108C 'find':104C 'incom':119C 'inject':95C 'input':126C 'insert':148C 'insuffici':110C 'item':120C 'key':115C 'make':139C 'match':142C 'mongodb':99C,153C 'n8n':76C 'new':149C 'node':100C,141C 'nosql':94C 'oper':107C,137C 'overwrit':144C 'replac':106C 'suppli':124C 'taken':117C 'unintend':145C 'untrust':125C 'updat':102C,114C 'use':135C 'valid':111C 'valu':116C 'vulner':96C 'webhook':130C 'workflow':134C 'x':80C,84C,89C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-10-28T08:48:23+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-126383","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-126383","severity":null,"published_at":"2026-11-13T10:17:41+00:00","modified_at":"2026-11-13T10:17:41+00:00","first_seen_at":"2026-11-13T10:47:18+00:00","fetched_at":"2026-11-13T10:47:18+00:00","note":null}],"documents":[{"id":110632,"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-4v22-g448-h4rg","title":"Maintainer's advisory: github.com","kind":"vendor","source":"ghsa-repo","publisher":"vendor","text":null,"published_at":"2026-10-28T08:48:23+00:00","relation":"advisory","confidence":null,"note":"Vendor advisory: github.com"},{"id":145009,"url":"https://www.vulncheck.com/advisories/n8n-before-1.123.89-nosql-injection-via-mongodb-node-update-key","title":"Third-party advisory: www.vulncheck.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: www.vulncheck.com"}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}