CVE-2026-44792: n8n Has a Source Control Pull SQL Injection

An attacker with write access to the git repository connected to an n8n Source Control configuration could commit a malicious Data Table JSON file containing a crafted column name. When an administrator performed a Source Control Pull, n8n imported the file and could lead to SQL injection on the internal PostgreSQL instance.

Exploitation requires all of the following conditions:

• The n8n instance uses PostgreSQL as its database backend.
• The Source Control feature is enabled and connected to a repository the attacker can write to.
• An administrator triggers a Source Control Pull.