CVE-2026-103255

{
  "etk_id": "ETK-2026-242",
  "cve_id": "CVE-2026-103255",
  "display_id": "CVE-2026-103255",
  "ghsa_id": "GHSA-34g6-xwv9-46f3",
  "euvd_id": "EUVD-2026-90649",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Path traversal in n8n Supabase node",
  "summary": "Affected n8n releases allow the Supabase node to construct request locations from an insufficiently restricted table identifier. An attacker can access or alter Supabase resources outside the intended table scope when a workflow supplies that identifier from untrusted input; exposed Auth or Storage access can use the configured administrative credential and bypass row-level controls.",
  "mitigation": "Upgrade n8n to the applicable fixed release: 1.123.80, 2.39.6, or 2.40.1. Until upgraded, prevent untrusted workflow input from selecting the Supabase table identifier and restrict access to affected workflows.",
  "vendor": "n8n-io",
  "product": "n8n",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, < 1.123.80",
        ">= 2.0.0, < 2.39.6",
        ">= 2.40.0, < 2.40.1"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "1.123.80",
        "2.39.6",
        "2.40.1"
      ],
      "package_name": "n8n",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 9,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
  "epss_score": 0.003,
  "epss_percentile": 0.2093,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 33.36353976666667,
  "t0_at": "2026-10-01T10:42:00.052000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-01T10:42:00.052000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-01T10:42:00.052000+00:00",
      "url": "https://github.com/advisories/GHSA-34g6-xwv9-46f3"
    }
  }
}