CVE-2026-86074
Description
n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the Instance AI credential setup flow accepted a credential test or verification URL without checking that it matched the workflow node's origin. Attacker-controlled fetched content could influence that URL after a user injected it into the setup flow, causing authenticated requests, redirects, or probes to reach another origin. The affected logic includes packages/@n8n/instance-ai/src/tools/workflows/credential-utils.ts and the extractServiceOrigin origin derivation. This issue is fixed in versions 2.37.7 and 2.38.2.
How to fix
- n8n n8n2.37.7, 2.38.2 or later
- n8n2.38.2, 2.37.7 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| n8n n8n | v < 2.37.7, 2.38.0 ≤ v < 2.38.2 | 2.37.7, 2.38.2 |
| n8nnpm | 2.38.0 ≤ v < 2.38.2, v < 2.37.7 | 2.38.2, 2.37.7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.