CVE-2026-65596: n8n authorization bypass in GraphQL node allows credential exfiltration

Executive brief

n8n is a workflow automation tool used to connect different software services. A security flaw in its GraphQL component allows authorized users to bypass security restrictions that normally limit which websites can receive sensitive login information. An attacker with access to create or edit workflows could use this to send company credentials to a server they control, potentially leading to unauthorized access to other business accounts.

Technical details

An incorrect authorization vulnerability (CWE-863) exists in n8n where the GraphQL node does not enforce the 'Allowed HTTP Request Domains' restriction. While the standard HTTP Request node respects these boundaries, the GraphQL node allows HTTP-based credentials (including Basic Auth, Header Auth, and OAuth) to be sent to any arbitrary domain. An authenticated attacker with workflow creation or editing privileges can configure a GraphQL node to point to a malicious endpoint, thereby exfiltrating shared credentials. The vulnerability is patched in versions 1.123.64, 2.29.8, and 2.30.1.

Affected products

• n8n-io n8n < 1.123.64, >= 2.0.0 < 2.29.8, >= 2.30.0 < 2.30.1

Timeline

• 2026-07-08: disclosed
• 2026-07-22: advisory

References

• https://api.github.com/users/34selen
• https://github.com/34selen
• https://api.github.com/users/34selen/gists%7B/gist_id%7D
• https://api.github.com/users/34selen/repos
• https://avatars.githubusercontent.com/u/73600142?v=4
• https://api.github.com/users/34selen/events%7B/privacy%7D