{"data":{"id":"ac0cccf5-6e04-40d7-9a9b-c2e88c69ad5e","title":"GHSA-vhf8-cg2h-cg3p: n8n: SSRF Protection Bypass via MCP Client Node","summary":"n8n, a workflow automation tool, had a security flaw where the MCP Client node (a component for making external requests) bypassed SSRF protection (a security feature that blocks requests to internal servers). An authenticated user could exploit this to make the server connect to blocked internal hosts and retrieve their responses, potentially exposing sensitive internal services.","solution":"The issue has been fixed in n8n versions 2.31.5 and 2.32.1. Users should upgrade to one of these versions or later to remediate the vulnerability. If upgrading is not immediately possible, administrators can: restrict n8n instance access to fully trusted users only; disable the MCP Client node by adding it to the `NODES_EXCLUDE` environment variable; or restrict network egress from the n8n host to block access to internal and link-local address ranges at the network level. The source notes these workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-vhf8-cg2h-cg3p","publishedAt":"2026-07-22T22:07:04.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["n8n@< 2.31.5 (fixed: 2.31.5)","n8n@>= 2.32.0, < 2.32.1 (fixed: 2.32.1)"],"affectedVendors":[],"affectedVendorsRaw":["n8n"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":true,"disclosureDate":"2026-07-22T22:07:04.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}