Executive brief
n8n is a workflow automation platform that enables users to build and deploy integrations between applications. When users configure the GraphQL node's authentication parameter in expression mode with multiple credentials of different types, the platform incorrectly bypasses domain restrictions on one credential while still using both. An authenticated user with workflow-creation rights can exploit this to send restricted credentials to attacker-controlled endpoints, potentially leaking sensitive credentials and their associated permissions.
Technical details
The vulnerability is an authorization bypass in the GraphQL node's Authentication parameter handling. When set to expression mode, the node treats all authentication-gated credential selectors as active. If two credentials of different types are attached, the allowed-domains policy is enforced only for the first credential, while authentication material from both credentials is still included in the request. This allows a restricted credential (which would normally block requests to certain domains) to be sent to an attacker-controlled endpoint. Exploitation requires an authenticated user with workflow-authoring rights. The impact is limited to the permissions of the exfiltrated credential. The vulnerability is fixed in versions 1.123.69, 2.33.4, and 2.34.1.
Affected products
- n8n n8n before 1.123.69, 2.x before 2.33.4, 2.x before 2.34.1
Timeline
- 2026-08-05: disclosed: GitHub Security Advisory GHSA-wcv8-x773-j96r published
- 2026-08-20: advisory: CVE-2026-77081 published in NVD
- 2026-08-05: patched: Fixes available in n8n 1.123.69, 2.33.4, and 2.34.1