EUVD-2026-38376Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network endpoint, low-complexity SSRF; PR:L because authentication and credential access are required; S:C because requests cross to external unauthorized hosts; C:L for credential leakage; no integrity or availability impact.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
3DescriptionCVE.org
n8n before 2.20.0 contains a credential exfiltration vulnerability in the POST /rest/dynamic-node-parameters/options endpoint that allows authenticated users to bypass Allowed HTTP Request Domains restrictions. Attackers with credential access can cause the n8n server to issue HTTP requests with credentials to unauthorized hosts, exfiltrating sensitive authentication data.
AnalysisAI
Server-Side Request Forgery (SSRF) in n8n's dynamic node parameters endpoint allows authenticated users with credential access to bypass the platform's Allowed HTTP Request Domains restriction, causing the n8n server to issue outbound HTTP requests carrying stored credentials to attacker-controlled or unauthorized hosts. All n8n deployments prior to version 2.20.0 are affected regardless of domain restriction configuration, as the restriction is not enforced on the POST /rest/dynamic-node-parameters/options endpoint. No public exploit code or CISA KEV listing has been identified at time of analysis, but the attack is low-complexity once authentication is obtained.
Technical ContextAI
n8n is an open-source workflow automation platform (npm package n8n, CPE cpe:2.3:a:n8n:n8n:*:*:*:*:*:*:*:*) that allows users to build integrations using credentials stored server-side. The platform implements an Allowed HTTP Request Domains control intended to restrict which external hosts the n8n server may contact on behalf of users. CWE-918 (Server-Side Request Forgery) describes the root cause: the POST /rest/dynamic-node-parameters/options endpoint accepts user-supplied host targets and issues server-side HTTP requests without validating them against the domain allowlist. This means the n8n process itself - running with its own network context and access to stored credentials - becomes the proxying agent that delivers authentication data to an attacker-designated destination, bypassing the intended network-layer control entirely.
RemediationAI
The primary remediation is to upgrade n8n to version 2.20.0 or later, which is confirmed as the vendor-released patch per the GHSA advisory at https://github.com/n8n-io/n8n/security/advisories/GHSA-3875-8gcx-7v46. For deployments where immediate upgrade is not feasible, the vendor recommends two short-term workarounds, both of which the vendor explicitly notes do not fully remediate the risk: first, restrict n8n instance access to fully trusted users only, eliminating the threat from lower-trust authenticated users - this trades off collaborative utility of the platform; second, limit credential sharing so that only users who genuinely require a credential are granted access to it - this reduces the pool of users who could abuse the bypass but does not fix the underlying endpoint flaw. Blocking outbound HTTP from the n8n server process to untrusted networks at the firewall or egress proxy layer would provide an additional compensating control by limiting where exfiltrated credentials can be sent, though it may break legitimate workflow integrations.
n8n workflow automation (through 1.121.2) allows authenticated users to execute arbitrary code via the n8n service, with
n8n workflow automation (1.65.0 to 1.121.0) allows unauthenticated file access through form-based workflows. A critical
n8n has a fifth critical RCE vulnerability (CVSS 9.9) in the Expression evaluator, enabling code execution through craft
An authenticated user with workflow creation or modification privileges in n8n workflow automation platform can exploit
Authenticated n8n users can hijack administrator accounts when LDAP authentication is enabled by manipulating their LDAP
The n8n package 0.218.0 for Node.js allows Escalation of Privileges. Rated high severity (CVSS 8.8), this vulnerability
Authenticated users can exploit string formatting and exception handling in n8n's Python task executor to escape sandbox
The n8n package 0.218.0 for Node.js allows Information Disclosure. Rated high severity (CVSS 7.5), this vulnerability is
The n8n package 0.218.0 for Node.js allows Directory Traversal. Rated medium severity (CVSS 6.5), this vulnerability is
n8n versions prior to 2.5.0 contain a critical SSH host key verification bypass in the Source Control feature that allow
This vulnerability in n8n (an open-source workflow automation platform) is an authentication bypass in the OAuth callbac
Code injection in n8n workflow automation before 2.10.1/2.9.3/1.123.22 allows authenticated users to execute arbitrary c
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today