p PatchFirst

CVE-2026-86082

CVE-2026-86082 · n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node

This page contains facts from public vulnerability sources. Check the original advisory before updating.

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the OpenAI Chat Model node enforced credential allowed-domain restrictions for normal calls but not for the model-search dropdown. A workflow editor could set options.baseURL to an arbitrary host and make the searchModels path send the openAiApi credential there. The affected implementation is packages/@n8n/nodes-langchain/nodes/llms/LMChatOpenAi/methods/loadModels.ts, which omitted assertOpenAiCredentialAllowsUrl. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.

CVSS 7.1 · High · EPSS 0.4% · Fix available

Published
Updated

Stack: node

Affected products and versions

  • n8n

    Versions
    • >= 2.38.0, < 2.38.2: Affected
    • >= 2.0.0, < 2.37.7: Affected
    • < 1.123.76: Affected

    No fix published

  • n8n npm

    Affected ranges
    • SEMVER: < 1.123.76

    Update to 1.123.76

  • n8n npm

    Affected ranges
    • SEMVER: ≥ 2.38.0, < 2.38.2

    Update to 2.38.2

  • n8n npm

    Affected ranges
    • SEMVER: ≥ 2.0.0, < 2.37.7

    Update to 2.37.7

Original sources

Check your server →