CVE-2026-59207CWE-693

n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector

High · published July 9, 2026

CVSS v4.0
7.1
EPSS
0%
Percentile
37.9
In the wild
Unconfirmed
What it is

n8n is an open source workflow automation platform. Prior to 2.27.4 and 2.28.1, the AI Agents feature did not enforce the Allowed HTTP Request Domains restriction configured on credentials when an MCP tool was pointed at an arbitrary URL, allowing a member-level user with use-only access to a shared credential to send its secret to an external server they control. This issue is fixed in versions 2.27.4 and 2.28.1.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N
EPSS
0.00448 · 37.9th percentile
Weakness
CWE-693 · Protection Mechanism Failure
Published
2026-07-09T15:16Z
EPSS history
Timeline
  • 09 JUL 15:16Z
    n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector
    cvelistv5