CVE-2026-77081 n8n before 1.123.69 Allowed-Domains Bypass via GraphQL Node

Medium 5.1 Published 20 Aug 2026 Updated 21 Aug 2026

Authenticated users can bypass allowed-domains restrictions in the GraphQL node to exfiltrate credentials to attacker-controlled endpoints.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2026-77081?

CVE-2026-77081 is a medium-severity vulnerability in N8n N8n, published on 20 Aug 2026. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

n8n before 1.123.69, 2.x before 2.33.4, and 2.x before 2.34.1 contain an allowed-domains bypass in the GraphQL node. When the node's Authentication parameter is set to expression mode, every authentication-gated credential selector is treated as active; if two credentials of different types are attached, the node enforces the allowed-domains policy of only the first credential while still attaching material from both. An authenticated user with workflow-authoring rights can thereby send a domain-restricted credential to an attacker-controlled endpoint, exfiltrating it with the leaked credential's permissions.

Weakness: CWE-639

Which versions are affected by CVE-2026-77081?

It affects 1 product.

Products include N8n N8n.

How do I fix CVE-2026-77081?

Upgrade to a fixed version.

Is CVE-2026-77081 being exploited?

There is no known exploitation of CVE-2026-77081 in the wild and no public exploit code.

All N8n N8n vulnerabilities

Sources

Also known as GHSA-jrhf-3pw6-qqwv, GHSA-wcv8-x773-j96r, MINI-224x-jfcr-gjhv.