---
id: "GHSA-mgpr-56r4-5c67"
page: "https://infrastack.ai/live/GHSA-mgpr-56r4-5c67"
kind: "vulnerability"
aliases: ["GHSA-mgpr-56r4-5c67"]
title: "OData $filter Injection in Microsoft Outlook and SharePoint v1 Nodes"
severity: "medium"
cvss: 5.3
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: [{"name": "n8n", "fixed": [">= 1.123.85"], "affected": "< 1.123.85", "ecosystem": "npm"}, {"name": "n8n", "fixed": [">= 2.44.1"], "affected": "< 2.44.1", "ecosystem": "npm"}, {"name": "n8n", "fixed": [">= 2.43.5"], "affected": "< 2.43.5", "ecosystem": "npm"}]
ecosystems: ["npm"]
tags: ["ai-tooling", "microsoft-outlook", "n8n", "self-hosted", "sharepoint"]
not_affected_if: ["no-outlook-or-sharepoint-v1-nodes", "trusted-input-only"]
published_at: "2026-10-14T09:44:47+00:00"
first_seen_at: "2026-11-09T22:53:26+00:00"
updated_at: "2026-11-09T22:56:56+00:00"
sources: [{"source": "ghsa-repo", "url": "https://github.com/n8n-io/n8n/security/advisories/GHSA-mgpr-56r4-5c67", "first_seen_at": "2026-11-09T22:53:26+00:00"}]
exploit_sources: []
---

# OData $filter Injection in Microsoft Outlook and SharePoint v1 Nodes

Link for people: https://infrastack.ai/live/GHSA-mgpr-56r4-5c67 (this .md is for agents)

Unescaped input in the Microsoft Outlook contact lookup and SharePoint v1 item update nodes lets a crafted value rewrite the OData query. An attacker who can feed data into those workflow fields can list a mailbox's full contact list or make the node write field values onto an unintended SharePoint list item, within the stored credential's scope.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- npm:n8n affected < 1.123.85 fixed >= 1.123.85
- npm:n8n affected < 2.44.1 fixed >= 2.44.1
- npm:n8n affected < 2.43.5 fixed >= 2.43.5

## How to check

- Check the n8n version with `n8n --version` or in the instance settings, and compare it to the fixed versions.
- Search active workflows for the Microsoft Outlook contact `getAll` operation and the Microsoft SharePoint v1 item update or upsert operation.
- Check whether untrusted external data, such as webhook input, is bound into those node parameters.

## Fix

- n8n `1.123.85`
- n8n `2.43.5`
- n8n `2.44.1`

## Timeline

- 2026-11-09T22:53:26+00:00 ghsa-repo https://github.com/n8n-io/n8n/security/advisories/GHSA-mgpr-56r4-5c67

## Documents

- [advisory] Vendor advisory: github.com https://github.com/n8n-io/n8n/security/advisories/GHSA-mgpr-56r4-5c67

## From the sources

## Impact

The Microsoft Outlook contact lookup and the Microsoft SharePoint v1 item update build an OData $filter string literal from an expression-bindable parameter without escaping it. A single quote in the value closes the literal and rewrites the query. Where a workflow binds untrusted input into those fields, the Outlook lookup returns the bound mailbox's entire contact list instead of one contact, and the SharePoint pre-write lookup can be redirected so the node writes the submitted field values onto a list item the workflow never intended, both within the scope of the stored credential.

## Patches

The issue has been fixed in n8n versions 1.123.85, 2.44.1, and 2.43.5. Users should upgrade to one of these versions or later to remediate the vulnerability.

## Workarounds

If upgrading is not immediately possible, administrators should consider the following temporary mitigations:
- Restrict n8n instance access to fully trusted users only.
- Audit active workflows that use the Microsoft Outlook contact `getAll` operation or the Microsoft SharePoint v1 item update/upsert operation and remove any bindings that pass untrusted external data into the affected parameters.
- Apply network-level controls to restrict access to webhook endpoints that feed into these workflows.
- Deactivate affected workflows until the instance is patched.

These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_