Executive brief
n8n is a workflow automation platform that allows users to create and manage data processing workflows. The GraphQL node in n8n failed to enforce domain restrictions on HTTP credentials (such as API keys and authentication tokens), allowing authenticated users to redirect requests to attacker-controlled servers and steal restricted credentials. This undermines security policies designed to limit where credentials can be used.
Technical details
The vulnerability is an improper authorization/privilege escalation (CWE-863) affecting the GraphQL node in n8n. The node failed to validate the "Allowed HTTP Request Domains" restriction that should have been applied to HTTP-based credentials (Header Auth, Basic Auth, Query Auth, OAuth), unlike the HTTP Request node which properly enforced this restriction. An authenticated user with workflow creation/editing permissions can exploit this by pointing the GraphQL node endpoint to a malicious server under their control, exfiltrating credentials configured with domain restrictions. The attack requires authentication, workflow creation/editing permissions, and that the credential be shared with non-owner users and have domain restrictions configured. Patches are available in n8n versions 1.123.64, 2.29.8, and 2.30.1.
Affected products
- n8n n8n < 1.123.64, < 2.29.8, < 2.30.1
Timeline
- 2026-07-08: disclosed
- 2026-07-22: patched: Versions 1.123.64, 2.29.8, and 2.30.1 released