Vulnerability record · CVE-2026-86082 · published 8 September 2026

CVE-2026-86082: N8n server-side request forgery (ssrf) vulnerability

N8n · N8n

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the OpenAI Chat Model node enforced credential allowed-domain restrictions for normal calls but not for the model-search dropdown. A workflow editor could set options.baseURL to an arbitrary host and make the searchModels path send the openAiApi credential there. The affected implementation is packages/@n8n/nodes-langchain/nodes/llms/LMChatOpenAi/methods/loadModels.ts, which omitted assertOpenAiCredentialAllowsUrl. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.

7.1 CVSS 4.0 High EPSS 0.42% · top 66.8% CWE-918 · Server-side request forgery (SSRF)

7.1CVSS 4.0 base score

0.42%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

4References

14 Sep 2026Last modified by NVD

Description

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

N8n N8n

References

Link	Tags
https://github.com/n8n-io/n8n/releases/tag/[email protected]	Release Notes
https://github.com/n8n-io/n8n/releases/tag/[email protected]	Release Notes
https://github.com/n8n-io/n8n/releases/tag/[email protected]	Release Notes
https://github.com/n8n-io/n8n/security/advisories/GHSA-34ff-336r-5q23	MitigationVendor Advisory

Track CVE-2026-86082 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2025-68613n8n workflow expression evaluation RCE for authenticated usersn8n versions from 0.211.0 before 1.120.4, 1.121.1, and 1.122.0 evaluate user-supplied workflow expressions in an execution context that is not suffic…KEVEPSS 99%analysed19 Dec 2025 10.0CVE-2026-21858n8n form workflows allow unauthenticated file accessn8n versions from 1.65.0 up to but not including 1.121.0 fail to properly validate input in certain form-based workflows, letting an attacker read fi…EPSS 78%analysed8 Jan 2026 9.9CVE-2026-1470N8n vulnerabilityn8n contains a critical Remote Code Execution (RCE) vulnerability in its workflow Expression evaluation system. Expressions supplied by authenticated…EPSS 21%27 Jan 2026 9.9CVE-2026-0863N8n code injection vulnerabilityUsing string formatting and exception handling, an attacker may bypass n8n's python-task-executor sandbox restrictions and run arbitrary unrestricted…EPSS 9.4%18 Jan 2026 9.9CVE-2026-21877N8n code injection vulnerabilityn8n is an open source workflow automation platform. In versions 0.121.2 and below, an authenticated attacker may be able to execute malicious code us…EPSS 5.4%8 Jan 2026 9.9CVE-2025-68668N8n vulnerabilityn8n is an open source workflow automation platform. From version 1.0.0 to before 2.0.0, a sandbox bypass vulnerability exists in the Python Code Node…EPSS 13%26 Dec 2025 9.5CVE-2026-27493N8n code injection vulnerabilityn8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, a second-order expression injection vulnerability …EPSS 1.6%25 Feb 2026 9.4CVE-2026-44789N8n prototype pollution vulnerabilityn8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify …EPSS 0.53%23 Jun 2026

Source: NIST National Vulnerability Database (record CVE-2026-86082), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.