{"data":{"id":"30afdf91-db59-4e10-8fcf-ad1404b8d858","title":"GHSA-gq66-9cw5-j5jm: n8n: GraphQL Node Bypasses \"Allowed HTTP Request Domains\" Restriction","summary":"The GraphQL node in n8n (a workflow automation tool) had a security flaw where it didn't properly enforce \"Allowed HTTP Request Domains\" restrictions on certain types of credentials (authentication methods like API keys and passwords), even though the regular HTTP Request node did. This meant that someone with permission to create workflows could potentially steal these restricted credentials by sending them to a server they control.","solution":"The issue has been fixed in n8n versions 1.123.64, 2.29.8, and 2.30.1. Users should upgrade to one of these versions or later to remediate the vulnerability. If upgrading is not immediately possible, administrators can temporarily: restrict workflow creation and editing permissions to fully trusted users only, restrict credential sharing to fully trusted users only, and audit credentials with domain restrictions for unexpected sharing relationships. However, these workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-gq66-9cw5-j5jm","publishedAt":"2026-07-22T22:32:23.000Z","cveId":"CVE-2026-65596","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["data_extraction"],"issueType":"vulnerability","affectedPackages":["n8n@>= 2.0.0, < 2.29.8 (fixed: 2.29.8)","n8n@>= 2.30.0, < 2.30.1 (fixed: 2.30.1)","n8n@< 1.123.64 (fixed: 1.123.64)"],"affectedVendors":[],"affectedVendorsRaw":["n8n"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"patchAvailable":true,"disclosureDate":"2026-07-22T22:32:23.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}