CyberRota Analysis
AI-GeneratedThe SearXNG Agent tool in n8n versions prior to 2.34.1 and 2.33.4 is vulnerable to a Server-Side Request Forgery (SSRF) protection bypass, allowing authenticated users to configure API URLs that can target internal hosts. This could lead to unauthorized access to sensitive internal resources, as the n8n server would connect to these hosts and expose their response content. Organizations using affected versions of n8n, especially those with user permissions to create SearXNG credentials, should prioritize patching to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
n8n before 2.34.1 and 2.33.x before 2.33.4 contains an SSRF protection bypass in the SearXNG Agent tool. The tool sent requests to the user-supplied API URL using a raw HTTP client that did not route through n8n's centralized SSRF protection. On instances with N8N_SSRF_PROTECTION_ENABLED=true, an authenticated user with permission to create SearXNG credentials and configure a personal agent could set the API URL to an internal host, causing the n8n server to connect to that host and return the response content through the Agent chat output.
Related CVEs
Other vulnerabilities affecting the same vendor(s)