Evidence · DiggingBeagle record
n8n Oracle vector-store metadata SQL injection advisory
Maintainer evidence of dynamically supplied metadata identifiers crossing into Oracle SQL syntax.
- Source role
- primary disclosure
Evidence record
Maintainer evidence of dynamically supplied metadata identifiers crossing into Oracle SQL syntax.
Claim-level citations (2)
- supportsn8n Oracle vector metadata identifiers became SQL syntax: The n8n OracleDB vector-store advisory describes an attacker-influenced metadata-filter name being placed into SQL identifier syntax, bypassing intended separation between workflow input and database query structure.
GHSA-2x68-96jw-5r6c: OracleDB Vector Store metadata filter, query construction, fixed versions
- supportsn8n Oracle vector metadata identifiers became SQL syntax: The OracleDB Vector Store node interpolated the metadata filter name into a SQL identifier even when the name originated from untrusted workflow input. The affected workflow had to route external data, for example a webhook expression, into a dynamic Metadata Filter Name while using Oracle database credentials. A crafted name could change the generated query and access data with the node credential authority.
GHSA-2x68-96jw-5r6c: OracleDB Vector Store metadata filter, query construction, fixed versions