Executive brief
n8n is a workflow automation and integration platform. An authenticated user with network access to an n8n instance can exploit a flaw in the dynamic node parameters endpoints to make the server send HTTP requests to internal systems and services, potentially exposing sensitive data or accessing restricted resources. The vulnerability requires authentication but no special privileges, and SSRF protection must be disabled (the default configuration). This could allow attackers to probe or interact with internal databases, monitoring systems, cloud metadata endpoints, or other backend services normally inaccessible from outside the network.
Technical details
The vulnerability is a server-side request forgery (SSRF) flaw in n8n's /rest/dynamic-node-parameters/ endpoints, which lacked proper authorization scope validation. The vulnerable component allows any authenticated user (without requiring workflow creation or execution privileges) to supply arbitrary absolute URLs in routing configuration, overriding the node type's declared baseURL restrictions. By providing a malicious URL, an attacker can force the n8n server to issue HTTP requests to arbitrary internal targets. The attack requires network connectivity to the n8n instance and valid authentication credentials, but no user interaction. SSRF protection is disabled by default (N8N_SSRF_PROTECTION_ENABLED=false), making most installations vulnerable by default. The issue has been patched in n8n versions 1.123.64, 2.29.8, and 2.30.1; administrators should upgrade immediately or enable SSRF protection and restrict network egress as interim mitigations.
Affected products
- n8n n8n < 1.123.64, 2.0.0 - < 2.29.8, 2.30.0
Timeline
- 2026-07-22: disclosed: GHSA-9w78-79q7-r4fp published as primary advisory
- 2026-07-22: patched: Fixed in versions 1.123.64, 2.29.8, and 2.30.1
- 2026-07-22: other: GHSA-38fj-36m5-783c withdrawn as duplicate of GHSA-9w78-79q7-r4fp