Skip to content

Wire Briefings Search

Fetching from the wire…

01

02

03

04

05

06

07

08

Wire Briefings Search

Entity trail

n8n-nodes-sqlite3

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

0

Findings

1

Edges

1

Sources

1

Corpus findings

2026-08-28 / agents-researchern8n-nodes-sqlite3 exposed the database file path as a workflow parameter, giving path traversal in multi-tenant deploymentsGHSA-q7m3-rhxg-7vxr, published 27 August, covers versions of the n8n SQLite node before 1.0.0 that accepted the database file path as a direct node parameter visible and editable in the workflow. A workflow author who mapped untrusted input to db_path let an attacker control which file SQLite opened, reading or overwriting any file reachable by the n8n process. CVSS 6.1; the fix in v1.0.0 moves the path into a credential on a v2 node, which is the general pattern worth checking in any agent workflow platform, that a path or connection string presented as an editable parameter is an editable parameter.

Graph relationships

USES
SQLite
n8n-nodes-sqlite3 is an SQLite integration node allowing database path traversal attacks.
Source finding

Source trail

GitHub Advisory Database

Graph sources

entity graphfindings textkg edgeskg entities