{"id":"CVE-2026-119557","published":"2026-10-30T12:16:42.887","lastModified":"2026-10-30T17:17:20.373","description":"n8n from 2.14.0 through 2.46.3 contains a path traversal vulnerability in the Databricks node that allows unauthenticated attackers to reach arbitrary Databricks API endpoints by injecting unencoded resource identifiers. Attackers can supply ../ sequences and query strings via webhook, chat, or form inputs mapped to spaceId, indexName, or filePath to read secrets using the stored credential.","cvssScore":5.9,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-22"],"vendors":[],"products":[],"references":[{"url":"https://abraxaslabs.tech/research/n8n-databricks-path-join","tags":[]},{"url":"https://github.com/n8n-io/n8n","tags":[]},{"url":"https://github.com/n8n-io/n8n/blob/n8n%402.45.7/packages/nodes-base/nodes/Databricks/actions/files/downloadFile.operation.ts#L27","tags":[]},{"url":"https://github.com/n8n-io/n8n/blob/n8n%402.45.7/packages/nodes-base/nodes/Databricks/actions/genie/getSpace.operation.ts#L14-L18","tags":[]},{"url":"https://github.com/n8n-io/n8n/blob/n8n%402.45.7/packages/nodes-base/nodes/Databricks/actions/vectorSearch/getIndex.operation.ts#L12","tags":[]},{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-89p4-6h98-c7xm","tags":[]},{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-rqch-9jrh-cr8w","tags":[]},{"url":"https://www.vulncheck.com/advisories/n8n-from-2.14.0-through-2.46.3-path-traversal-via-databricks-node","tags":[]}],"exploitRefs":[{"url":"https://github.com/n8n-io/n8n","tags":[]},{"url":"https://github.com/n8n-io/n8n/blob/n8n%402.45.7/packages/nodes-base/nodes/Databricks/actions/files/downloadFile.operation.ts#L27","tags":[]},{"url":"https://github.com/n8n-io/n8n/blob/n8n%402.45.7/packages/nodes-base/nodes/Databricks/actions/genie/getSpace.operation.ts#L14-L18","tags":[]},{"url":"https://github.com/n8n-io/n8n/blob/n8n%402.45.7/packages/nodes-base/nodes/Databricks/actions/vectorSearch/getIndex.operation.ts#L12","tags":[]},{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-89p4-6h98-c7xm","tags":[]},{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-rqch-9jrh-cr8w","tags":[]}],"hasPoc":true,"ai":null}