n8n versions before 1.123.32, 2.17.4, and 2.18.1 contain an SQL injection vulnerability (CWE-89) in the SeaTable node's row:search and row:get operations. User-controlled input passed via expressions into these parameters is concatenated directly into SQL query strings without sanitization, enabling attackers to alter the query logic and access unauthorized data rows. This flaw compromises row-level filtering controls in workflows that integrate SeaTable. The issue is addressed by patches in the stated versions.

An attacker able to supply input to the vulnerable SeaTable node parameters can manipulate SQL queries to retrieve data rows that should be restricted by workflow filtering logic. This leads to unauthorized data disclosure from the connected SeaTable base. The vulnerability does not require user interaction but does require some level of privileges to inject input into the workflow. There are no known exploits in the wild as of the publication date.

This vulnerability is patched in n8n versions 1.123.32, 2.17.4, and 2.18.1. Users should upgrade to these or later versions to remediate the issue. Since this is not a cloud service, remediation depends on applying the official fixes. Patch status is confirmed by the vendor advisory. No additional mitigations are specified.