CVE-2026-72771 n8n-io CVE debrief

Who should care

Organizations using n8n for workflow automation, especially those with low-privileged workflow editors and shared credentials, should be aware of this vulnerability. They should assess their deployments, prioritize patching, and restrict access to shared credentials to mitigate potential risks. Security teams and vulnerability management teams should also review the vulnerability's impact on their environments.

Technical summary

n8n versions before 2.32.1 fail to enforce the Allowed HTTP Request Domains allowlist in multiple AI and LLM nodes. Low-privileged workflow editors can redirect requests to attacker-controlled hosts, exfiltrating credential secrets. This vulnerability allows for potential credential exfiltration and unauthorized access to underlying services. Affected organizations should prioritize patching and restrict access to shared credentials.

Defensive priority

Organizations using n8n versions before 2.32.1 should prioritize patching, especially if low-privileged workflow editors have access to shared credentials.

Recommended defensive actions

• Patch n8n to version 2.32.1 or later
• Restrict access to shared credentials for low-privileged workflow editors
• Monitor for suspicious requests to attacker-controlled hosts
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD entry provide initial details. Further analysis is needed to fully understand the vulnerability's impact and verify affected versions. The vulnerability affects n8n versions before 2.32.1 and involves multiple AI and LLM nodes. Low-privileged workflow editors can redirect requests to attacker-controlled hosts, potentially exfiltrating credential secrets. Organizations should verify their deployments and assess the risk of exposed credentials.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.