CVE-2026-72771

Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.32.1

Description Multiple AI and LLM nodes fail to enforce the Allowed HTTP Request Domains allowlist when base or endpoint URLs are configured by the user. This allows low-privileged workflow editors who have use-only access to shared credentials to redirect requests to hosts controlled by an attacker, leading to the exfiltration of credential secrets for subsequent use against underlying services.

Recommendations Update to version 2.32.1 or later.