Vulnerability Details CVE-2026-72771
n8n versions before 2.32.1 fail to enforce the Allowed HTTP Request Domains allowlist in multiple AI and LLM nodes when user-supplied base or endpoint URLs are configured. Low-privileged workflow editors with use-only access to shared credentials can redirect requests to attacker-controlled hosts and exfiltrate credential secrets for reuse against underlying services.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 10.9%
CVSS Severity
CVSS v3 Score 6.5