CVE-2026-77085
Received Received - Intake

SSRF Protection Bypass in n8n SearXNG Agent

Publication date: 2026-08-20

Last updated on: 2026-08-20

Assigner: VulnCheck

Description
n8n before 2.34.1 and 2.33.x before 2.33.4 contains an SSRF protection bypass in the SearXNG Agent tool. The tool sent requests to the user-supplied API URL using a raw HTTP client that did not route through n8n's centralized SSRF protection. On instances with N8N_SSRF_PROTECTION_ENABLED=true, an authenticated user with permission to create SearXNG credentials and configure a personal agent could set the API URL to an internal host, causing the n8n server to connect to that host and return the response content through the Agent chat output.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-20
Last Modified
2026-08-20
Generated
2026-08-20
AI Q&A
2026-08-20
EPSS Evaluated
N/A
NVD
CVE-2026-77085
EUVD
EUVD-2026-63273

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
n8n-io n8n to 2.34.1 (exc)
n8n-io n8n to 2.33.4 (exc)
n8n n8n From 2.33.0 (inc) to 2.33.4 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Server-Side Request Forgery (SSRF) protection bypass in n8n versions before 2.34.1 and 2.33.x before 2.33.4. It affects the SearXNG Agent tool, which sends requests to user-supplied API URLs using a raw HTTP client that bypasses n8n's centralized SSRF protection. When SSRF protection is enabled, an authenticated user with specific permissions can set the API URL to an internal host, causing the n8n server to connect to that host and return the response content.

Detection Guidance

Check n8n version with 'n8n --version' or inspect package.json. Look for SearXNG Agent tool usage in logs or configurations. Monitor network egress from n8n host for unexpected internal host connections.

Impact Analysis

An attacker could exploit this to access internal services or sensitive data by tricking the n8n server into making unauthorized requests to internal hosts. This could lead to data leaks, unauthorized access to internal systems, or further network reconnaissance. The impact depends on the internal services exposed and the permissions of the n8n instance.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, which may violate compliance requirements under GDPR (data protection), HIPAA (health information), or other regulations. Organizations using affected n8n versions may face compliance violations if internal data is exposed due to this flaw.

Mitigation Strategies

Upgrade n8n to version 2.34.1 or later. Disable SearXNG Agent tool if unused. Restrict instance access to trusted users only. Block internal network access from n8n host at firewall level.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-77085. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart