GHSA-3875-8gcx-7v46: n8n: Credential exfiltration via Allowed HTTP Request Domains Bypass

Summary

GHSA-3875-8gcx-7v46 affects n8n. The POST /rest/dynamic-node-parameters/options endpoint let any authenticated user with access to a credential make the n8n server send HTTP requests that carry that credential, bypassing the Allowed HTTP Request Domains restriction on which hosts it may contact.

Mitigation

Fixed in n8n version 2.20.0. Upgrade to 2.20.0 or later. If upgrading is not immediately possible, restrict n8n access to fully trusted users and limit credential sharing to users who genuinely need those credentials; the source states these workarounds do not fully remediate the risk and are short-term measures only.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• n8nnpmLLM dependency since 2026-04-29

Related items

• InfoResearchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six DaysSimilar attack · The Hacker News
• MediumAn AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.Similar attack · The Hacker News
• LowFBI arrests Saudi OpenAI employee who allegedly planted recording device in conference roomSimilar attack · CNBC Technology
• MediumVisual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)Similar attack · Embrace The Red
• LowAnthropic warns self-replicating AI could spread to your smart devicesSimilar attack · BleepingComputer