{"cve":"CVE-2026-59207","nvd":{"published":"2026-07-09T16:16:46.470","modified":"2026-10-25T17:10:00.197","status":"Analyzed","description":"n8n is an open source workflow automation platform. Prior to 2.27.4 and 2.28.1, the AI Agents feature did not enforce the Allowed HTTP Request Domains restriction configured on credentials when an MCP tool was pointed at an arbitrary URL, allowing a member-level user with use-only access to a shared credential to send its secret to an external server they control. This issue is fixed in versions 2.27.4 and 2.28.1.","cvss_v4":{"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N","score":7.1},"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","score":6.5},"cwes":["CWE-693"],"references":["https://github.com/n8n-io/n8n/releases/tag/n8n%402.27.4","https://github.com/n8n-io/n8n/releases/tag/n8n%402.28.1","https://github.com/n8n-io/n8n/security/advisories/GHSA-h44j-f5r5-ph73"],"products":["n8n:n8n"],"source":"nvd","synced_at":"2026-10-25T17:50:06.907763985+00:00"},"epss":{"cve":"CVE-2026-59207","score":0.00448,"percentile":0.38653,"date":"2026-10-25"},"kev":null,"osv":[{"id":"GHSA-h44j-f5r5-ph73","url":"https://osv.dev/vulnerability/GHSA-h44j-f5r5-ph73","summary":"n8n: \"Allowed HTTP Request Domains\" Restriction Bypass via AI Agents MCP Connector","modified":"2026-07-22T22:00:25.694700968Z","packages":[{"ecosystem":"npm","name":"n8n","purl":"pkg:npm/n8n","ranges":[">=2.28.0 <2.28.1"],"fixed":["2.28.1"]},{"ecosystem":"npm","name":"n8n","purl":"pkg:npm/n8n","ranges":["<2.27.4"],"fixed":["2.27.4"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}