CyberRota Analysis
AI-GeneratedVersions of n8n prior to 2.32.1 are vulnerable due to inadequate enforcement of the Allowed HTTP Request Domains allowlist, particularly in AI and LLM nodes. This flaw allows low-privileged workflow editors to redirect requests to malicious hosts, potentially leading to the exfiltration of sensitive credentials. Organizations using n8n should prioritize updating to the latest version to mitigate the risk of credential theft and unauthorized access to services.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
n8n versions before 2.32.1 fail to enforce the Allowed HTTP Request Domains allowlist in multiple AI and LLM nodes when user-supplied base or endpoint URLs are configured. Low-privileged workflow editors with use-only access to shared credentials can redirect requests to attacker-controlled hosts and exfiltrate credential secrets for reuse against underlying services.