SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-77085

MEDIUM · CVSS 6.5 EPSS 0.21% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-20 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The SearXNG Agent tool in n8n versions prior to 2.34.1 and 2.33.4 is vulnerable to a Server-Side Request Forgery (SSRF) protection bypass, allowing authenticated users to configure API URLs that can target internal hosts. This could lead to unauthorized access to sensitive internal resources, as the n8n server would connect to these hosts and expose their response content. Organizations using affected versions of n8n, especially those with user permissions to create SearXNG credentials, should prioritize patching to mitigate this risk.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-77085
Severity
MEDIUM
CVSS
6.5
EPSS
0.21%

Original NVD Description

n8n before 2.34.1 and 2.33.x before 2.33.4 contains an SSRF protection bypass in the SearXNG Agent tool. The tool sent requests to the user-supplied API URL using a raw HTTP client that did not route through n8n's centralized SSRF protection. On instances with N8N_SSRF_PROTECTION_ENABLED=true, an authenticated user with permission to create SearXNG credentials and configure a personal agent could set the API URL to an internal host, causing the n8n server to connect to that host and return the response content through the Agent chat output.

Related CVEs

Other vulnerabilities affecting the same vendor(s)