CVE-2026-119557
Deferred Deferred - Pending Action

Path Traversal in n8n Databricks Node

Publication date: 2026-10-30

Last updated on: 2026-10-30

Assigner: VulnCheck

Description
n8n from 2.14.0 through 2.46.3 contains a path traversal vulnerability in the Databricks node that allows unauthenticated attackers to reach arbitrary Databricks API endpoints by injecting unencoded resource identifiers. Attackers can supply ../ sequences and query strings via webhook, chat, or form inputs mapped to spaceId, indexName, or filePath to read secrets using the stored credential.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-30
Last Modified
2026-10-30
Generated
2026-10-30
AI Q&A
2026-10-30
EPSS Evaluated
N/A
NVD
CVE-2026-119557
EUVD
EUVD-2026-113822

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
n8n-io n8n 2.14.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a path traversal issue in n8n versions 2.14.0 through 2.46.3 affecting the Databricks node. It allows unauthenticated attackers to access arbitrary Databricks API endpoints by injecting unencoded resource identifiers such as ../ sequences or query strings into inputs like spaceId, indexName, or filePath. This can lead to reading secrets via stored credentials.

Detection Guidance

To detect this vulnerability, inspect n8n instances running versions 2.14.0 through 2.46.3 for unusual API requests targeting Databricks endpoints. Check webhook, chat, or form inputs for ../ sequences or query strings in parameters like spaceId, indexName, or filePath. Monitor logs for unauthenticated access attempts to Databricks API endpoints.

Impact Analysis

An attacker could exploit this to access sensitive Databricks API endpoints, potentially reading secrets stored in credentials. This may result in unauthorized data access, data breaches, or further compromise of systems relying on Databricks integrations.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR and HIPAA requirements for data protection and access controls. Organizations may face compliance violations, legal penalties, and reputational damage if exploited.

Mitigation Strategies

Immediately upgrade n8n to a version beyond 2.46.3 to patch the path traversal flaw. Disable or restrict access to Databricks node functionality if not required. Review and remove any stored credentials used by vulnerable n8n instances. Implement network-level controls to block unauthorized API requests to Databricks endpoints.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-119557. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart