Skip to content
Threat Feed
Subscribe

Product

N8n (< 1.123.76, >= 2.0.0 < 2.37.7, >= 2.38.0 < 2.38.2)

1 brief RSS
high advisory

Domain-Restriction Bypass in n8n OpenAI Chat Model Node

An unauthenticated credential access vulnerability in n8n allows users to bypass domain restrictions in the OpenAI Chat Model node via the model-search endpoint, leading to unauthorized credential exposure.

n8n +4 vulnerability webserver credential-theft cve-2026-86082 denial-of-service web-vulnerability cve-2026-86076 javascript +1
3t 1c updated