Back to overview

CVE-2026-56348

CRITICAL
9.1
CVSS 3.1
Description
n8n before 2.20.0 contains a credential exfiltration vulnerability in the POST /rest/dynamic-node-parameters/options endpoint that allows authenticated users to bypass Allowed HTTP Request Domains restrictions. Attackers with credential access can cause the n8n server to issue HTTP requests with credentials to unauthorized hosts, exfiltrating sensitive authentication data.

Metadata

CVE ID
CVE-2026-56348
State
PUBLISHED
Assigner
VulnCheck
Reserved
2026-06-20 18:13 UTC
Published
2026-06-22 21:04 UTC
Last updated
2026-06-22 21:04 UTC
Primary CWE
CWE-918
Server-Side Request Forgery (SSRF)
Vendor / Product
n8n / n8n
Sources
cve.org  ·  NVD

Severity & Metrics

9.1 CRITICAL CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L
Affected products (1)
VendorProductPlatformVersions
n8n n8n — 0 < 2.20.0, 2.20.0
Weakness (CWE)
CWESourceDescription
CWE-918 cna Server-Side Request Forgery (SSRF)
CVSS scores (2)
ScoreSeverityVersionSourceVector
9.1 CRITICAL 3.1 cna CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L
5.3 MEDIUM 4.0 cna CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:L/SA:L
References (2)
Back to overview