CVE-2026-77081
Received Received - Intake

Allowed-Domains Bypass in n8n Workflow Automation

Publication date: 2026-08-20

Last updated on: 2026-08-20

Assigner: VulnCheck

Description
n8n before 1.123.69, 2.x before 2.33.4, and 2.x before 2.34.1 contain an allowed-domains bypass in the GraphQL node. When the node's Authentication parameter is set to expression mode, every authentication-gated credential selector is treated as active; if two credentials of different types are attached, the node enforces the allowed-domains policy of only the first credential while still attaching material from both. An authenticated user with workflow-authoring rights can thereby send a domain-restricted credential to an attacker-controlled endpoint, exfiltrating it with the leaked credential's permissions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-20
Last Modified
2026-08-20
Generated
2026-08-20
AI Q&A
2026-08-20
EPSS Evaluated
N/A
NVD
CVE-2026-77081
EUVD
EUVD-2026-63269

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
n8n n8n to 1.123.69 (exc)
n8n n8n to 2.33.4 (exc)
n8n n8n to 2.34.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects n8n, a workflow automation tool, in versions before 1.123.69, 2.33.4, and 2.34.1. It involves the GraphQL node's Authentication parameter when set to expression mode. If multiple credentials of different types are attached, the node incorrectly applies the allowed-domains policy from only the first credential while still using material from both. This allows an authenticated user with workflow-authoring rights to send a restricted credential to an attacker-controlled endpoint, bypassing domain restrictions.

Detection Guidance

Check n8n version with: n8n --version. If using Docker, run: docker exec <container_name> n8n --version. Vulnerable versions are <1.123.69, 2.x <2.33.4, or 2.x <2.34.1. Inspect workflows for GraphQL nodes with Authentication set to expression mode and multiple attached credentials.

Impact Analysis

An attacker could exploit this to exfiltrate a domain-restricted credential to an external endpoint, gaining access to resources permitted by that credential. The impact is limited to the permissions of the leaked credential. Exploitation requires an authenticated user with workflow-authoring rights to set the Authentication parameter to expression mode and attach at least two credentials.

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating compliance requirements such as GDPR (data protection) or HIPAA (healthcare data privacy). Unauthorized credential use may result in data breaches, triggering regulatory penalties, reputational damage, and loss of trust.

Mitigation Strategies

Upgrade n8n to patched versions (1.123.69, 2.33.4, or 2.34.1). Restrict instance access to authorized users only. Audit all workflows for GraphQL nodes using expression mode authentication. Disable network egress for workflows handling sensitive credentials.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-77081. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart