CVE-2026-72768 n8n-io CVE debrief

Who should care

Users of n8n versions before 2.32.1, particularly those with workflows that interact with internal or sensitive services, should be aware of this vulnerability and take steps to mitigate it. This includes reviewing and updating n8n to version 2.32.1 or later, restricting workflow creation to trusted users, and monitoring for suspicious workflow activity. Additionally, operators, platform administrators, and security teams should review their configurations and implement compensating controls to prevent exploitation.

Technical summary

The CVE-2026-72768 vulnerability in n8n versions before 2.32.1 allows authenticated users to bypass server-side request forgery (SSRF) protections in the MCP Client node. This is achieved by crafting workflows that send requests to internal or blocked hosts without routing through SSRF protection. As a result, internal services may be exposed, and responses can be read back through the workflow. The vulnerability has a CVSS score of 6.4 and a severity rating of MEDIUM.

Defensive priority

Authenticated users could bypass SSRF protections, potentially exposing internal services.

Recommended defensive actions

• Review and update n8n to version 2.32.1 or later
• Restrict workflow creation to trusted users
• Monitor for suspicious workflow activity
• Implement additional internal service protections
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE-2026-72768 record indicates n8n versions before 2.32.1 have a server-side request forgery protection bypass vulnerability. Authenticated users can craft workflows to send requests to internal or blocked hosts without SSRF protection, potentially exposing internal services and reading responses. This vulnerability allows attackers to bypass SSRF protections and access internal services without proper routing. To verify and mitigate this vulnerability, defenders should review workflow configurations, monitor for suspicious activity, and ensure that internal services are properly secured.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.