p PatchFirst

CVE-2026-72771

CVE-2026-72771 · n8n before 2.32.1 Credential Restriction Bypass via AI/LLM Nodes

This page contains facts from public vulnerability sources. Check the original advisory before updating.

n8n versions before 2.32.1 fail to enforce the Allowed HTTP Request Domains allowlist in multiple AI and LLM nodes when user-supplied base or endpoint URLs are configured. Low-privileged workflow editors with use-only access to shared credentials can redirect requests to attacker-controlled hosts and exfiltrate credential secrets for reuse against underlying services.

CVSS 7.1 · High · EPSS 0.4% · Fix available

Published
Updated

Stack: node

Affected products and versions

  • n8n

    Versions
    • ≥ 0, < 2.32.1: Affected (semver)
    • 2.32.1: Not affected (semver)

    Update to 2.32.1

  • n8n

    Versions
    • ≥ 0, < 2.31.5: Affected (semver)
    • 2.31.5: Not affected (semver)

    Update to 2.31.5

  • n8n npm

    Affected ranges
    • SEMVER: ≥ 2.32.0, < 2.32.1

    Update to 2.32.1

  • n8n npm

    Affected ranges
    • SEMVER: < 2.31.5

    Update to 2.31.5

Original sources

Check your server →