CVE-2026-72768
Received Received - Intake

SSRF Protection Bypass in n8n Workflows

Publication date: 2026-08-11

Last updated on: 2026-08-11

Assigner: VulnCheck

Description
n8n versions before 2.32.1 contain a server-side request forgery protection bypass vulnerability in the MCP Client node that allows authenticated users to bypass SSRF protections. Attackers can craft workflows that send requests to internal or blocked hosts without routing through SSRF protection, exposing internal services and reading responses back through the workflow.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-11
Last Modified
2026-08-11
Generated
2026-08-11
AI Q&A
2026-08-11
EPSS Evaluated
N/A
NVD
CVE-2026-72768
EUVD
EUVD-2026-56094

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
n8n n8n to 2.32.1 (exc)
n8n n8n to 2.31.5 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Server-Side Request Forgery (SSRF) protection bypass vulnerability in n8n versions before 2.32.1. It exists in the MCP Client node and allows authenticated users to craft workflows that send requests to internal or blocked hosts without going through SSRF protections. This could expose internal services and allow reading responses back through the workflow.

Detection Guidance

Check n8n version with: n8n --version. If version is below 2.32.1 or 2.31.5, the system is vulnerable. Inspect workflows for MCP Client nodes sending requests to internal or blocked hosts.

Impact Analysis

An attacker with authenticated access could exploit this to send requests to internal systems or blocked hosts, bypassing network security controls. This may expose sensitive internal services or data. The impact depends on what internal services are accessible and what data they handle.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, which may violate compliance requirements under GDPR (data protection) or HIPAA (health information privacy). Organizations using vulnerable n8n versions may face compliance violations if internal data is exposed through this flaw.

Mitigation Strategies

Upgrade n8n to version 2.32.1 or 2.31.5 immediately. Temporarily restrict workflow creation to trusted users, disable the MCP Client node, or block network egress to internal and link-local addresses.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72768. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart