GHSA-vhf8-cg2h-cg3p: n8n: SSRF Protection Bypass via MCP Client Node
Summary
n8n, a workflow automation tool, had a security flaw where the MCP Client node (a component for making external requests) bypassed SSRF protection (a security feature that blocks requests to internal servers). An authenticated user could exploit this to make the server connect to blocked internal hosts and retrieve their responses, potentially exposing sensitive internal services.
Solution / Mitigation
The issue has been fixed in n8n versions 2.31.5 and 2.32.1. Users should upgrade to one of these versions or later to remediate the vulnerability. If upgrading is not immediately possible, administrators can: restrict n8n instance access to fully trusted users only; disable the MCP Client node by adding it to the `NODES_EXCLUDE` environment variable; or restrict network egress from the n8n host to block access to internal and link-local address ranges at the network level. The source notes these workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.
Classification
Affected Vendors
Affected Packages
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e
Original source: https://github.com/advisories/GHSA-vhf8-cg2h-cg3p
First tracked: July 22, 2026 at 08:01 PM
Classified by LLM (prompt v3) · confidence: 85%