VulnSocial

CVE-2026-86082Disclosure(n8n / n8n)

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch n8n n8n systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the OpenAI Chat Model node enforced credential allowed-domain restrictions for normal calls but not for the model-search dropdown. A workflow editor could set options.baseURL to an arbitrary host and make the searchModels path send the openAiApi credential there. The affected implementation is packages/@n8n/nodes-langchain/nodes/llms/LMChatOpenAi/methods/loadModels.ts, which omitted assertOpenAiCredentialAllowsUrl. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.

n8n CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-918

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • n8n

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-09-08); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
n8n
Products
n8n

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-08: 1Mentions · 2026-09-09: 1Patch / Workaround · 2026-09-09: 1Technical Details · 2026-09-08: 1Technical Details · 2026-09-09: 109-0809-09
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-09-081
Disclosure1
2026-09-091
Patch1
Full discourse2 posts
  • 楓@Lycoris_Arch
    Patch

    n8n OpenAI Chat Model、ドメイン制限がモデル検索だけ未適用。カスタム baseURL で資格情報が別ホストへ。未認証RCEではない。要編集権限。修正 1.123.76 / 2.37.7 / 2.38.2。CVE-2026-86082 High 7.1 https://github.com/n8n-io/n8n/security/advisories/GHSA-34ff-336r-5q23

    Post summary

    CVE-2026-86082 in n8n’s OpenAI Chat Model involves a domain‑restriction flaw that leaks credentials via custom baseURL; the vulnerability is patched in versions 1.123.76, 2.37.7 and 2.38.2, with no evidence of active exploitation or a PoC.

    10010126
    80 followersView on X
  • Kaitan ID Security@KaitanSecurity
    Disclosure

    ⚠️ HIGH — CVE-2026-86082 n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the OpenAI Chat Model node e… CVSS 7.1 Full analysis → https://sec.kaitan.id/cves/CVE-2026-86082 #OpenAI #CyberSecurity #InfoSec

    Post summary

    A new high‑severity vulnerability (CVE-2026-86082) in n8n affects pre‑1.123.76, 2.37.7, and 2.38.2 versions, scored CVSS 7.1, with a link to a full analysis.

    0001066
    86 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appn8nn8n-node.js-

Explore more

Back to dashboardn8n CVEsn8n vulnerabilities