Which versions of n8n are affected by CVE-2026-72771?

n8n's workflow automation platform contains a vulnerability in versions before 2.32.1 that allows low-privileged users to steal stored API credentials and secrets by bypassing domain-restriction…. A patch is available.

How to fix or mitigate CVE-2026-72771?

Immediately inventory all n8n deployments and identify instances with shared credentials and domain-restriction controls configured; audit access logs for suspicious credential usage within 24 hours. Within 7 days, upgrade all affected n8n npm installations to version 2.32.1 and rotate any stored credentials that were shared with low-privilege users as a precautionary measure. Over the next 30 days, implement credential governance controls such as credential-level access logging and alerts, discontinue sharing sensitive credentials with low-privilege accounts in favor of workflow-specific service accounts, and establish continuous monitoring for anomalous credential usage patterns.

n8n CVE-2026-72771

Q: What is the CVSS score of CVE-2026-72771?

CVE-2026-72771 has a CVSS 4.0 base score of 7.1 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

EUVD-2026-56097 HIGH

Incorrect Authorization (CWE-863)

2026-08-11 VulnCheck

GHSA-h7wc-28g5-h4g8

Authentication Bypass N8n N8N Io

7.1

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

7.1 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

8.5 HIGH

Network-accessible with low privileges; scope changes because stolen credentials impact downstream services; integrity set to L for potential downstream API misuse.

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Patch available

Aug 11, 2026 - 13:17 EUVD

Source Code Evidence Fetched

Aug 11, 2026 - 12:53 vuln.today

Analysis Generated

Aug 11, 2026 - 12:53 vuln.today

CVE Published

Aug 11, 2026 - 12:17 cve.org

HIGH 7.1

DescriptionCVE.org

n8n versions before 2.32.1 fail to enforce the Allowed HTTP Request Domains allowlist in multiple AI and LLM nodes when user-supplied base or endpoint URLs are configured. Low-privileged workflow editors with use-only access to shared credentials can redirect requests to attacker-controlled hosts and exfiltrate credential secrets for reuse against underlying services.

AnalysisAI

Credential exfiltration in n8n's AI and LLM workflow nodes allows low-privileged users with use-only access to shared credentials to bypass the 'Allowed HTTP Request Domains' allowlist and redirect credential secrets to attacker-controlled infrastructure. Affected are all n8n npm installations before version 2.31.5 and the 2.32.0 release (fixed in 2.32.1), where at least one credential has domain restrictions configured and is shared with non-owner users. No public exploit code has been identified at time of analysis and this vulnerability is not listed in the CISA KEV catalog, but the attack is low-complexity for any insider or compromised low-privilege account.

Technical ContextAI

n8n is a Node.js-based workflow automation platform (npm package n8n-io/n8n) that supports AI and LLM integrations where users can supply custom base or endpoint URLs. The platform implements a 'Allowed HTTP Request Domains' allowlist on credentials as an authorization control to prevent use-only credential holders from exfiltrating secrets to arbitrary hosts. CWE-863 (Incorrect Authorization) is the root cause: the authorization check enforcing the domain allowlist was simply not applied in the code paths handling user-supplied base/endpoint URLs across multiple AI and LLM node types. The CPE cpe:2.3:a:n8n-io:n8n:*:*:*:*:*:*:*:* covers all affected versions published via npm. The fix commit (f69dfc6dd2178a14ea1624d2e1d403c2e755042f) patches the enforcement gap across the affected nodes.

RemediationAI

Vendor-released patches are available: upgrade to n8n version 2.31.5 or 2.32.1 (or any later release) via npm, as confirmed by the GitHub Security Advisory GHSA-64xh-79j6-r5v8. The fix commit f69dfc6dd2178a14ea1624d2e1d403c2e755042f enforces the allowlist across the previously unprotected AI and LLM node code paths. If an immediate upgrade is not feasible, three temporary mitigations are available per the vendor advisory: (1) Restrict workflow creation and editing permissions to fully trusted users only - this prevents untrusted users from configuring malicious endpoint URLs but may break legitimate collaborative workflows; (2) Restrict credential sharing to fully trusted users only - this eliminates the attack surface entirely but reduces the utility of shared credentials; (3) Audit all credentials with 'Allowed HTTP Request Domains' configured for unexpected sharing relationships and revoke non-essential shares. The vendor explicitly notes these workarounds do not fully remediate the risk and should be treated as short-term measures only. The VulnCheck advisory at https://www.vulncheck.com/advisories/n8n-before-credential-restriction-bypass-via-ai-llm-nodes provides additional context.