{"data":{"id":"9e78e7ed-15ac-4b5a-9e4d-77d77f2491da","title":"GHSA-3875-8gcx-7v46: n8n: Credential exfiltration via Allowed HTTP Request Domains Bypass","summary":"GHSA-3875-8gcx-7v46 affects n8n. The POST /rest/dynamic-node-parameters/options endpoint let any authenticated user with access to a credential make the n8n server send HTTP requests that carry that credential, bypassing the Allowed HTTP Request Domains restriction on which hosts it may contact.","solution":"Fixed in n8n version 2.20.0. Upgrade to 2.20.0 or later. If upgrading is not immediately possible, restrict n8n access to fully trusted users and limit credential sharing to users who genuinely need those credentials; the source states these workarounds do not fully remediate the risk and are short-term measures only.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-3875-8gcx-7v46","publishedAt":"2026-05-19T16:17:43.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["n8n@< 2.20.0 (fixed: 2.20.0)"],"affectedPackageNames":["n8n"],"affectedPackageRefs":["npm:n8n"],"affectedVendors":[],"affectedVendorsRaw":["n8n"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-3875-8gcx-7v46"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-19T16:17:43.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.75,"researchCategory":null,"atlasIds":null}}