CVE-2026-77085CWE-918ssrf

CVE-2026-77085

Medium · published August 20, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
28.7
In the wild
Unconfirmed
What it is

n8n before 2.34.1 and 2.33.x before 2.33.4 contains an SSRF protection bypass in the SearXNG Agent tool. The tool sent requests to the user-supplied API URL using a raw HTTP client that did not route through n8n's centralized SSRF protection. On instances with N8N_SSRF_PROTECTION_ENABLED=true, an authenticated user with permission to create SearXNG credentials and configure a personal agent could set the API URL to an internal host, causing the n8n server to connect to that host and return the response content through the Agent chat output.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
6.3 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N
EPSS
0.00361 · 28.7th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2026-08-20T16:16Z
Affected products (2)
ProductVersionsFixed in
n8n/n8n≥ 2.33.0, < 2.33.42.33.4
n8n/n8nall versions—
References (2)
https://github.com/n8n-io/n8n/security/advisories/GHSA-9rp2-wm75-c5fj · [email protected]https://www.vulncheck.com/advisories/n8n-before-ssrf-protection-bypass-via-searxng-tool · [email protected]
EPSS history
Timeline
  • 20 AUG 11:21Z
    n8n before 2.34.1 SSRF Protection Bypass via SearXNG Tool
    cvelistv5