n8n Merge Node Arbitrary File Write Vulnerability Leading to Remote Code Execution

A vulnerability exists in the Merge node's SQL Query mode in n8n, an open-source workflow automation platform. Prior to versions 1.118.0 and 2.4.0, authenticated users with permission to create or modify workflows could write arbitrary files to the n8n server's filesystem. This file write capability potentially allowed for remote code execution.

Impact

Exploitation of this vulnerability could lead to arbitrary file writing on the server, with the potential for remote code execution.

Remediation

Users should upgrade to n8n version 2.4.0 or 1.118.0. If an immediate upgrade is not possible, consider limiting workflow creation and editing permissions to trusted users, disabling or restricting the Merge node's use, and reviewing workflows for suspicious SQL Query mode usage.