A SQL injection vulnerability exists in the SeaTable node of n8n in the `row:search` and `row:get` operations. This flaw allows user-controlled input to be concatenated directly into SQL queries without proper escaping or parameterization. Exploitation requires a workflow configuration where external user input is passed via expressions into the SeaTable node's search or row retrieval parameters. The vulnerability has been fixed in n8n versions 1.123.32, 2.17.4, and 2.18.1. Users should upgrade to these versions or later. Temporary mitigations include restricting workflow editing permissions, disabling the SeaTable node, and avoiding unvalidated external input in affected parameters.