PT-2026-50179 · Mongodb+1 · Mongodb+1

Sm1Ee · CVE-2026-54313 · Published 2026-06-16 · Updated 2026-07-16

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.24.0

Description An authenticated user with workflow edit access can provide a malicious filter value within the MongoDB node's Find And Replace operation. Because the value is not validated before being used as a query filter in MongoDB, it allows unintended documents to be matched and overwritten with content controlled by the attacker.

Recommendations Update to version 2.24.0 or later. Limit workflow creation and editing permissions to fully trusted users only. Disable the MongoDB node by adding n8n-nodes-base.mongoDb to the NODES EXCLUDE environment variable.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-54313

GHSA-JPQ7-226W-6CXX

Affected Products

Mongodb

N8N

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54313.json · Exploit
• https://github.com/n8n-io/n8n/security/advisories/GHSA-jpq7-226w-6cxx · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-APP-NPM-CVE-2026-54313 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-54313 · Security Note
• https://osv.dev/vulnerability/CVE-2026-54313 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-jpq7-226w-6cxx · Vendor Advisory
• https://github.com/n8n-io/n8n · Note
• https://t.me/cveNotify/173309 · Telegram Post
• https://t.me/cveNotify/175935 · Telegram Post