CVE-2026-72768 n8n before 2.32.1 SSRF Protection Bypass via MCP Client

Medium 6.4 Published 11 Aug 2026 Updated 29 Oct 2026

Authenticated users can bypass SSRF protections in the MCP Client node to access internal services and read responses.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2026-72768?

CVE-2026-72768 is a medium-severity server-side request forgery vulnerability in N8n N8n, published on 11 Aug 2026. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

n8n versions before 2.32.1 contain a server-side request forgery protection bypass vulnerability in the MCP Client node that allows authenticated users to bypass SSRF protections. Attackers can craft workflows that send requests to internal or blocked hosts without routing through SSRF protection, exposing internal services and reading responses back through the workflow.

Weakness: CWE-918

Which versions are affected by CVE-2026-72768?

4 open source packages ship an affected version, including n8n. It affects 1 product.

Package	Affected	Fixed in
`n8n` npm	All versions	`2.31.5`
`n8n` npm	All versions	`2.31.5`
`n8n` npm	From `2.32.0`	`2.32.1`
`n8n` npm	From `2.32.0`	`2.32.1`

Products include N8n N8n.

How do I fix CVE-2026-72768?

Upgrade n8n to a fixed version for your release line: 2.31.5 or 2.32.1.

Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.

Is CVE-2026-72768 being exploited?

There is no known exploitation of CVE-2026-72768 in the wild and no public exploit code.

All N8n N8n vulnerabilities

Sources

Also known as GHSA-vhf8-cg2h-cg3p, GHSA-xv2r-whj9-7vqh, MINI-28f3-q2h3-7787, MINI-j2f7-j2j9-xh83.