PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-77085 n8n-io CVE debrief

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-20T12:16:40.110Z and has not been modified since then. The n8n server is vulnerable to SSRF protection bypass via the SearXNG Agent tool. Instances with N8N_SSRF_PROTECTION_ENABLED=true are affected. An authenticated user could set the API URL to an internal host, causing the n8n server to connect to that host and return the response content through the Agent chat output.

Vendor
n8n-io
Product
n8n
CVSS
MEDIUM 6.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-08-20
Original CVE updated
2026-08-21
Advisory published
2026-08-20
Advisory updated
2026-08-21

Who should care

n8n users with instances having N8N_SSRF_PROTECTION_ENABLED=true, administrators of n8n servers, and security teams monitoring for SSRF attacks. These stakeholders should verify and restrict API URL inputs for SearXNG Agent tool configurations, review and limit permissions for users creating SearXNG credentials and configuring personal agents, and monitor for suspicious API URL configurations and Agent chat outputs.

Technical summary

The n8n server is vulnerable to SSRF protection bypass via the SearXNG Agent tool. The tool sends requests to user-supplied API URLs using a raw HTTP client that does not route through n8n's centralized SSRF protection. On instances with N8N_SSRF_PROTECTION_ENABLED=true, an authenticated user with permission to create SearXNG credentials and configure a personal agent could set the API URL to an internal host, causing the n8n server to connect to that host and return the response content through the Agent chat output.

Defensive priority

Authenticated users with permission to create SearXNG credentials and configure a personal agent should verify and restrict API URL inputs to prevent potential SSRF attacks.

Recommended defensive actions

  • Verify and restrict API URL inputs for SearXNG Agent tool configurations.
  • Review and limit permissions for users creating SearXNG credentials and configuring personal agents.
  • Monitor for suspicious API URL configurations and Agent chat outputs.
  • Implement compensating controls to detect and prevent SSRF attacks.
  • Check inventory for instances with N8N_SSRF_PROTECTION_ENABLED=true and ensure they are on a patched version.

Evidence notes

The n8n server is vulnerable to SSRF protection bypass via the SearXNG Agent tool. Instances with N8N_SSRF_PROTECTION_ENABLED=true are affected. An authenticated user could set the API URL to an internal host, causing the n8n server to connect to that host and return the response content through the Agent chat output. Further verification is needed to determine the full scope of affected systems and to confirm vendor remediation.

Official resources

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-20T12:16:40.110Z and has not been modified since then.