CyberRota Analysis
AI-GeneratedThe vulnerability affects n8n versions prior to 1.123.69 and 2.x before 2.33.4 and 2.34.1, allowing an authenticated user with workflow-authoring rights to bypass the allowed-domains policy in the GraphQL node. This flaw enables the exfiltration of domain-restricted credentials to attacker-controlled endpoints, potentially compromising sensitive data and permissions. Organizations using affected versions should prioritize patching to mitigate the risk of credential leakage.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
n8n before 1.123.69, 2.x before 2.33.4, and 2.x before 2.34.1 contain an allowed-domains bypass in the GraphQL node. When the node's Authentication parameter is set to expression mode, every authentication-gated credential selector is treated as active; if two credentials of different types are attached, the node enforces the allowed-domains policy of only the first credential while still attaching material from both. An authenticated user with workflow-authoring rights can thereby send a domain-restricted credential to an attacker-controlled endpoint, exfiltrating it with the leaked credential's permissions.
Related CVEs
Other vulnerabilities affecting the same vendor(s)