CVE-2026-126381

An n8n vector search filter could expose other Oracle data

n8n · OracleDB Vector Store node

First documented disclosure · Review checkpoint

Summary

The vector store included metadata filter keys supplied by the workflow in a database query without validating those keys. The workflow could return additional data accessible to the configured Oracle account.

Severity and exploitation evidence

Medium · 4.9/10 · CVSS 4.0. Severity source.

Exploitation not established: The reviewed advisory does not report malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The vector store included metadata filter keys supplied by the workflow in a database query without validating those keys.

Conditions required

An OracleDB Vector Store workflow accepted external input in its metadata filter and used an Oracle credential.

Potential impact

The workflow could return additional data accessible to the configured Oracle account.

Affected versions and configurations

Versions before 2.43.5, branch 2.44 before 2.44.1, and 3.0.0, per the CNA.

Fix and mitigation status

2.43.5, 2.44.1 or 3.0.1 on the respective branch.

Practical next steps

Upgrade to the corrected branch release and restrict the Oracle role available to the vector store.

Operating lesson

Allowlist field names before including retrieval filters in a database query.

Evidence and limits

The CVE record was published on 2026-11-13.

Sources