{"data":{"id":"7bfec98a-5720-4ed1-aca1-baf6b2b227d0","title":"CVE-2026-86082: n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the OpenAI Chat Model node…","summary":"n8n, an open source workflow automation platform, has a vulnerability in its OpenAI Chat Model node before versions 1.123.76, 2.37.7, and 2.38.2. The node enforced credential allowed-domain restrictions for normal calls but not for the model-search dropdown, so a workflow editor could set options.baseURL to an arbitrary host and have the searchModels path send the openAiApi credential there. The flaw sits in packages/@n8n/nodes-langchain/nodes/llms/LMChatOpenAi/methods/loadModels.ts, which omitted assertOpenAiCredentialAllowsUrl.","solution":"Fixed in versions 1.123.76, 2.37.7 and 2.38.2.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86082","publishedAt":"2026-09-08T22:19:17.240Z","cveId":"CVE-2026-86082","cweIds":["CWE-918"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["n8n@< 1.123.76 (fixed: 1.123.76)","n8n@>= 2.38.0, < 2.38.2 (fixed: 2.38.2)","n8n@>= 2.0.0, < 2.37.7 (fixed: 2.37.7)"],"affectedPackageNames":["n8n"],"affectedPackageRefs":["npm:n8n"],"affectedVendors":["OpenAI"],"affectedVendorsRaw":["n8n","OpenAI Chat Model node","OpenAI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"n8n OpenAI Chat Model node leaks credentials via model-search dropdown","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00415,"epssCheckedAt":"2026-11-04T12:08:33.434Z","kevDateAdded":null,"advisoryAliases":["GHSA-34ff-336r-5q23"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:44:09.994Z","patchAvailable":true,"disclosureDate":"2026-09-08T22:19:17.240Z","fixReleasedAt":"2026-09-02T07:25:50.542Z","daysToFix":-6,"fixCheckedAt":"2026-10-29T21:30:53.726Z","capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"n8n","fixedVersion":"2.38.2","matchedVersion":"2.38.2","fixReleasedAt":"2026-09-02T07:38:30.231Z","daysToFix":-6,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:30:53.576Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"2.37.7","matchedVersion":"2.37.7","fixReleasedAt":"2026-09-02T08:04:03.094Z","daysToFix":-6,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:30:53.576Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"1.123.76","matchedVersion":"1.123.76","fixReleasedAt":"2026-09-02T07:25:50.542Z","daysToFix":-6,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:30:53.576Z"}]}}