Executive brief
n8n is a workflow automation platform that allows users to build and run integrations and automations. The SearXNG Agent tool contains a flaw that allows authenticated users to bypass n8n's server-side request forgery (SSRF) protection by configuring a malicious API URL, enabling them to access internal services and retrieve sensitive response data that should not be exposed.
Technical details
The SearXNG Agent tool in n8n uses a raw HTTP client to send requests to user-supplied API URLs, bypassing the centralized SSRF protection mechanism. The vulnerability is a classic SSRF bypass (CWE-918) that requires network access and valid credentials. An authenticated user with permission to create SearXNG credentials and configure a personal agent can exploit this by setting the API URL to point to an internal host; when the Agent executes a search, the n8n server will connect to that internal host and return response content through the chat output. This impacts systems with N8N_SSRF_PROTECTION_ENABLED=true. The issue has been patched in versions 2.34.1, 2.33.4, 2.32.1, and 2.31.5.
Affected products
- n8n n8n before 2.34.1 and 2.33.x before 2.33.4
Timeline
- 2026-08-05: disclosed
- 2026-08-20: advisory