{"data":{"id":"7bfec98a-5720-4ed1-aca1-baf6b2b227d0","title":"CVE-2026-86082: n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the OpenAI Chat Model node en","summary":"n8n, an open source workflow automation platform, had a security flaw in its OpenAI Chat Model node where credential restrictions (rules about which websites are allowed) were not checked when searching for models in the editor dropdown. This allowed a workflow editor to redirect the API credential to an attacker's server by changing the base URL (the main web address where requests are sent). The vulnerability existed because the code that checks allowed domains was missing from the model-search feature.","solution":"This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86082","publishedAt":"2026-09-08T22:19:17.240Z","cveId":"CVE-2026-86082","cweIds":["CWE-918"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["OpenAI","LangChain"],"affectedVendorsRaw":["n8n","OpenAI","LangChain"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-09-08T22:19:17.240Z","capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":["AML.T0010"]}}