CVE-2026-59207 | n8n is an open source workflow automation platform. Prior to… | CVSS 7.1 HIGH

Description

n8n is an open source workflow automation platform. Prior to 2.27.4 and 2.28.1, the AI Agents feature did not enforce the Allowed HTTP Request Domains restriction configured on credentials when an MCP tool was pointed at an arbitrary URL, allowing a member-level user with use-only access to a shared credential to send its secret to an external server they control. This issue is fixed in versions 2.27.4 and 2.28.1.

Metadata

CVE ID: CVE-2026-59207
State: PUBLISHED
Assigner: GitHub_M
Reserved: 2026-07-02 21:05 UTC
Published: 2026-07-09 15:16 UTC
Last updated: 2026-07-09 15:51 UTC
Primary CWE: CWE-693
CWE-693: Protection Mechanism Failure
Vendor / Product: n8n-io / n8n
Sources: cve.org · NVD

Severity & Metrics

7.1 HIGH CVSS 4.0

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N

SSVC — CISA Coordinator

Exploitation: none
Automatable: no
Tech. Impact: partial

Affected products (1)

Vendor	Product	Platform	Versions
n8n-io	n8n	—	>= 2.28.0, < 2.28.1, < 2.27.4

Weakness (CWE)

CWE	Source	Description
CWE-693	cna	CWE-693: Protection Mechanism Failure

CVSS scores (1)

Score	Severity	Version	Source	Vector
7.1	HIGH	4.0	cna	CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N

References (3)

https://github.com/n8n-io/n8n/security/advisories/GHSA-h44j-f5r5-ph73 https://github.com/n8n-io/n8n/security/advisories/GHSA-h44j-f5r5-ph73
https://github.com/n8n-io/n8n/releases/tag/n8n%402.27.4 https://github.com/n8n-io/n8n/releases/tag/n8n%402.27.4
https://github.com/n8n-io/n8n/releases/tag/n8n%402.28.1 https://github.com/n8n-io/n8n/releases/tag/n8n%402.28.1