EUVD-2026-47637
GHSA-38fj-36m5-783c
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
PR:L for required low-privilege authentication; S:C and C:H capture high internal-system confidentiality impact via SSRF; I:L for limited integrity effect; A:N as no availability impact described.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
2DescriptionCVE.org
n8n versions before 1.123.64 contain a server-side request forgery vulnerability in the dynamic-node-parameters endpoints that lack authorization scopes. Authenticated attackers can supply absolute URLs in routing configuration to override baseURL restrictions and make the n8n server issue HTTP requests to arbitrary internal targets when SSRF protection is disabled.
AnalysisAI
Server-side request forgery in n8n workflow automation platform (versions before 1.123.64) enables authenticated low-privilege users to redirect the n8n server's HTTP requests to arbitrary internal network targets by injecting absolute URLs into routing configuration on dynamic-node-parameters endpoints that lack authorization scopes. The CVSS 4.0 vector assigns SC:H - high subsequent-system confidentiality impact - reflecting the risk of internal infrastructure exposure including cloud metadata endpoints, internal APIs, and private services. Exploitation is conditional on SSRF protection being disabled; no public exploit identified at time of analysis and no CISA KEV listing.
Technical ContextAI
n8n is an open-source workflow automation platform where users chain 'nodes' representing integrations and operations. The vulnerable surface is the dynamic-node-parameters endpoints, which dynamically resolve parameter values during workflow execution and accept routing configuration including a baseURL override mechanism. CWE-918 (Server-Side Request Forgery) arises here because the application accepts attacker-controlled absolute URLs that bypass the intended baseURL restriction, causing the server to act as a proxy toward arbitrary destinations. The n8n server process typically runs with network access to internal infrastructure - cloud metadata services, internal APIs, database management interfaces - that is unreachable by the attacker directly. This explains the SC:H rating: the vulnerable system itself may have limited exposure (VC:L, VI:L), but the subsequent internal systems it can reach face high confidentiality risk. The CPE cpe:2.3:a:n8n-io:n8n:*:*:*:*:*:*:*:* confirms all n8n-io/n8n package releases prior to 1.123.64 are in scope.
RemediationAI
Upgrade n8n to version 1.123.64 or later, which is the vendor-confirmed fix per GitHub security advisory GHSA-9w78-79q7-r4fp. For deployments unable to patch immediately, enable n8n's built-in SSRF protection - the CVE description explicitly states exploitation requires this protection to be disabled, making re-enabling it an effective compensating control; note that doing so may break legitimate workflow nodes that target private-network endpoints, so audit active workflows before toggling this setting. Additionally, restrict outbound network egress from the n8n host to only approved external destinations using firewall rules or egress proxies, which limits the blast radius of any SSRF even if protection is off. Block access to cloud instance metadata IP ranges (169.254.169.254, fd00:ec2::254) and internal RFC-1918 subnets from the n8n process as a defense-in-depth measure. Review existing workflow node routing configurations for unexpected absolute URLs that could indicate prior exploitation.
n8n workflow automation (through 1.121.2) allows authenticated users to execute arbitrary code via the n8n service, with
n8n workflow automation (1.65.0 to 1.121.0) allows unauthenticated file access through form-based workflows. A critical
n8n has a fifth critical RCE vulnerability (CVSS 9.9) in the Expression evaluator, enabling code execution through craft
A prototype pollution vulnerability in the XML and GSuiteAdmin nodes of n8n workflow automation platform allows authenti
An authenticated user with workflow creation or modification privileges in n8n workflow automation platform can exploit
n8n-workflows Main Commit ee25413 allows attackers to execute a directory traversal via the download_workflow function w
Authenticated n8n users can hijack administrator accounts when LDAP authentication is enabled by manipulating their LDAP
The n8n package 0.218.0 for Node.js allows Escalation of Privileges. Rated high severity (CVSS 8.8), this vulnerability
SQL injection in n8n's Data Table Get node allows authenticated users with workflow modification permissions to execute
Authenticated users can exploit string formatting and exception handling in n8n's Python task executor to escape sandbox
n8n workflow automation platform Community Edition contains an authorization bypass vulnerability allowing authenticated
The n8n package 0.218.0 for Node.js allows Information Disclosure. Rated high severity (CVSS 7.5), this vulnerability is
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today