{"data":{"id":"1c38cd06-adc9-4e66-b6d2-a47270e6b50c","title":"GHSA-hh89-3r9w-qj3j: n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint","summary":"n8n, a workflow automation platform, had a vulnerability where unauthenticated attackers could submit extremely large values in OAuth (open authorization, a login system) registration fields without proper size limits, causing the database to grow indefinitely without needing an account. The issue affected the `client_name` and `grant_types` fields, which only had basic existence checks rather than strict size validation like the `redirect_uris` field had.","solution":"The vulnerability is fixed in n8n versions 2.37.7 and 2.38.2 or later. If immediate upgrade is not possible, administrators can: restrict network access to only trusted clients, place the instance behind a reverse proxy (a server that filters traffic) configured to enforce strict request body size limits below the default 16 MiB, and monitor the database size and `oauth_clients` table for unusual entries. The source notes these workarounds do not fully remediate the risk and should only be temporary measures.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-hh89-3r9w-qj3j","publishedAt":"2026-09-10T15:11:31.000Z","cveId":"CVE-2026-86075","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":["n8n@< 2.37.7 (fixed: 2.37.7)","n8n@>= 2.38.0, < 2.38.2 (fixed: 2.38.2)"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["n8n"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00291,"patchAvailable":true,"disclosureDate":"2026-09-10T15:11:31.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}