Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 21:31:53 +0000 CVE-2026-119557 — n8n from 2.14.0 through 2.46.3 Path Traversal via Databricks Node https://db.gcve.eu/vuln/cve-2026-119557 <p><strong>Affected:</strong> n8n-io n8n</p> <p>n8n from 2.14.0 through 2.46.3 contains a path traversal vulnerability in the Databricks node that allows unauthenticated attackers to reach arbitrary Databricks API endpoints by injecting unencoded resource identifiers. Attackers can supply ../ sequences and query strings via webhook, chat, or form inputs mapped to spaceId, indexName, or filePath to read secrets using the stored credential.</p> <p><strong>Affected:</strong> n8n-io n8n</p> <p>n8n from 2.14.0 through 2.46.3 contains a path traversal vulnerability in the Databricks node that allows unauthenticated attackers to reach arbitrary Databricks API endpoints by injecting unencoded resource identifiers. Attackers can supply ../ sequences and query strings via webhook, chat, or form inputs mapped to spaceId, indexName, or filePath to read secrets using the stored credential.</p> https://db.gcve.eu/vuln/cve-2026-119557