CVE-2026-77085 n8n before 2.34.1 SSRF Protection Bypass via SearXNG Tool

Medium 6.3 Published 20 Aug 2026 Updated 21 Aug 2026

Authenticated users can bypass SSRF protections in the SearXNG tool to access internal network resources via crafted API URLs.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2026-77085?

CVE-2026-77085 is a medium-severity server-side request forgery vulnerability in N8n N8n, published on 20 Aug 2026. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

n8n before 2.34.1 and 2.33.x before 2.33.4 contains an SSRF protection bypass in the SearXNG Agent tool. The tool sent requests to the user-supplied API URL using a raw HTTP client that did not route through n8n's centralized SSRF protection. On instances with N8N_SSRF_PROTECTION_ENABLED=true, an authenticated user with permission to create SearXNG credentials and configure a personal agent could set the API URL to an internal host, causing the n8n server to connect to that host and return the response content through the Agent chat output.

Weakness: CWE-918

Which versions are affected by CVE-2026-77085?

It affects 1 product.

Products include N8n N8n.

How do I fix CVE-2026-77085?

Upgrade to a fixed version.

Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.

Is CVE-2026-77085 being exploited?

There is no known exploitation of CVE-2026-77085 in the wild and no public exploit code.

All N8n N8n vulnerabilities

Sources

Also known as GHSA-9rp2-wm75-c5fj, GHSA-gvf5-4g66-f766, MINI-9h4w-xj9h-pw5m.