Threats tagged 'ghsa-4qwq-628r-75jr'

n8n versions from 2.14.0 through 2.46.3 have a path traversal vulnerability in the Databricks node. This flaw allows unauthenticated attackers to inject unencoded resource identifiers containing ../ sequences and query strings via inputs mapped to spaceId, indexName, or filePath. Exploitation can lead to unauthorized access to arbitrary Databricks API endpoints and reading of secrets stored in credentials.