CVE-2026-86074 n8n-io CVE debrief

Who should care

Defenders responsible for n8n instances, particularly those using the Instance AI credential setup flow, should assess their exposure and apply patches to prevent potential credential testing or verification URL manipulation.

Why it matters

CVE-2026-86074 is a vulnerability in the n8n workflow automation platform that allows an attacker to influence the URL used for credential testing or verification. Defenders responsible for n8n instances should assess their exposure and apply patches to prevent potential credential testing or verification URL manipulation.

• Potential for authenticated requests, redirects, or probes to reach another origin.
• Risk of credential testing or verification URL manipulation.
• Need for verification of n8n instance versions and application of patches.

Technical summary

The Instance AI credential setup flow in n8n accepted a credential test or verification URL without checking that it matched the workflow node's origin. This allowed an attacker to influence the URL used for credential testing or verification, potentially causing authenticated requests, redirects, or probes to reach another origin. The affected logic includes packages/@n8n/instance-ai/src/tools/workflows/credential-utils.ts and the extractServiceOrigin origin derivation. This issue is fixed in versions 2.37.7 and 2.38.2.

Defensive priority

Defenders should prioritize verifying their n8n instance versions and applying the patches to prevent potential credential testing or verification URL manipulation.

Recommended defensive actions

• Verify n8n instance versions and apply patches to prevent potential credential testing or verification URL manipulation.
• Review and update workflows to ensure secure credential setup and verification processes.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, affected versions, and fixed versions. The Instance AI credential setup flow in n8n is a critical component that handles credential testing and verification. The vulnerability allows an attacker to influence the URL used for credential testing or verification, potentially causing authenticated requests, redirects, or probes to reach another origin. The affected logic includes packages/@n8n/instance-ai/src/tools/workflows/credential-utils.ts and the extractServiceOrigin

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.