{"id":"CVE-2026-86082","title":"n8n is an open source workflow automation platform","summary":"n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the OpenAI Chat Model node enforced credential allowed-domain restrictions for normal calls but not for the model-search dropdown. A workflow edit…","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-918"],"vendor":"n8n","product":"n8n","affected":["n8n < 1.123.76","n8n >= 2.0.0, < 2.37.7","n8n >= 2.38.0, < 2.38.2"],"patched":["n8n 2.38.2"],"published":"2026-09-08","updated":"2026-09-14","sourceUpdated":"2026-09-14T13:18:57.487","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86082","references":[{"url":"https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.76","label":"security-advisories@github.com"},{"url":"https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","label":"security-advisories@github.com"},{"url":"https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2","label":"security-advisories@github.com"},{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-34ff-336r-5q23","label":"security-advisories@github.com"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86082"},{"url":"https://github.com/advisories/GHSA-34ff-336r-5q23"}],"tags":["nvd","cve.org","ghsa","npm"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-14T12:03:11.876834Z"},"scores":{"nvd":6.5,"cna":7.1},"epss":0.00238,"epssPercentile":0.15171,"aliases":["GHSA-34ff-336r-5q23"],"ecosystem":"npm","ingestedAt":"2026-09-08T22:12:31.038Z","slug":"CVE-2026-86082","body":"## Overview\n\nn8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the OpenAI Chat Model node enforced credential allowed-domain restrictions for normal calls but not for the model-search dropdown. A workflow editor could set options.baseURL to an arbitrary host and make the searchModels path send the openAiApi credential there. The affected implementation is packages/@n8n/nodes-langchain/nodes/llms/LMChatOpenAi/methods/loadModels.ts, which omitted assertOpenAiCredentialAllowsUrl. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.\n\n## Affected\n\n- `n8n < 1.123.76`\n- `n8n >= 2.0.0, < 2.37.7`\n- `n8n >= 2.38.0, < 2.38.2`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `n8n 2.38.2`\n\n## Package advisory (CVE-2026-86082)\n\nAffected packages:\n\n- `n8n < 1.123.76`\n- `n8n >= 2.38.0, < 2.38.2`\n- `n8n >= 2.0.0, < 2.37.7`\n\nPatched in:\n\n- `n8n 1.123.76`\n- `n8n 2.38.2`\n- `n8n 2.37.7`\n\nSource: https://github.com/advisories/GHSA-34ff-336r-5q23","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":202072,"id":"CVE-2026-86082","ts":1789400047521,"field":"cvss","old":"7.1","new":"6.5"},{"seq":202071,"id":"CVE-2026-86082","ts":1789400047521,"field":"severity","old":"high","new":"medium"},{"seq":200799,"id":"CVE-2026-86082","ts":1789397615800,"field":"cvss","old":"6.5","new":"7.1"},{"seq":200798,"id":"CVE-2026-86082","ts":1789397615800,"field":"severity","old":"medium","new":"high"},{"seq":199492,"id":"CVE-2026-86082","ts":1789395521431,"field":"cvss","old":"7.1","new":"6.5"},{"seq":199491,"id":"CVE-2026-86082","ts":1789395521431,"field":"severity","old":"high","new":"medium"},{"seq":198737,"id":"CVE-2026-86082","ts":1789392243410,"field":"cvss","old":"6.5","new":"7.1"},{"seq":198736,"id":"CVE-2026-86082","ts":1789392243410,"field":"severity","old":"medium","new":"high"},{"seq":197070,"id":"CVE-2026-86082","ts":1789384291808,"field":"cvss","old":"7.1","new":"6.5"},{"seq":197069,"id":"CVE-2026-86082","ts":1789384291808,"field":"severity","old":"high","new":"medium"},{"seq":194199,"id":"CVE-2026-86082","ts":1789378782469,"field":"cvss","old":"6.5","new":"7.1"},{"seq":194198,"id":"CVE-2026-86082","ts":1789378782469,"field":"severity","old":"medium","new":"high"},{"seq":192986,"id":"CVE-2026-86082","ts":1789376514456,"field":"cvss","old":"7.1","new":"6.5"},{"seq":192985,"id":"CVE-2026-86082","ts":1789376514456,"field":"severity","old":"high","new":"medium"},{"seq":191773,"id":"CVE-2026-86082","ts":1789373630480,"field":"cvss","old":"6.5","new":"7.1"},{"seq":191772,"id":"CVE-2026-86082","ts":1789373630480,"field":"severity","old":"medium","new":"high"},{"seq":190558,"id":"CVE-2026-86082","ts":1789369474704,"field":"cvss","old":"7.1","new":"6.5"},{"seq":190557,"id":"CVE-2026-86082","ts":1789369474704,"field":"severity","old":"high","new":"medium"},{"seq":189345,"id":"CVE-2026-86082","ts":1789368408434,"field":"cvss","old":"6.5","new":"7.1"},{"seq":189344,"id":"CVE-2026-86082","ts":1789368408434,"field":"severity","old":"medium","new":"high"},{"seq":188128,"id":"CVE-2026-86082","ts":1789365230119,"field":"cvss","old":"7.1","new":"6.5"},{"seq":188127,"id":"CVE-2026-86082","ts":1789365230119,"field":"severity","old":"high","new":"medium"},{"seq":186915,"id":"CVE-2026-86082","ts":1789363470671,"field":"cvss","old":"6.5","new":"7.1"},{"seq":186914,"id":"CVE-2026-86082","ts":1789363470671,"field":"severity","old":"medium","new":"high"},{"seq":185701,"id":"CVE-2026-86082","ts":1789361228459,"field":"cvss","old":"7.1","new":"6.5"},{"seq":185700,"id":"CVE-2026-86082","ts":1789361228459,"field":"severity","old":"high","new":"medium"},{"seq":184488,"id":"CVE-2026-86082","ts":1789358363062,"field":"cvss","old":"6.5","new":"7.1"},{"seq":184487,"id":"CVE-2026-86082","ts":1789358363062,"field":"severity","old":"medium","new":"high"},{"seq":182739,"id":"CVE-2026-86082","ts":1789354316476,"field":"cvss","old":"7.1","new":"6.5"},{"seq":182738,"id":"CVE-2026-86082","ts":1789354316476,"field":"severity","old":"high","new":"medium"},{"seq":181532,"id":"CVE-2026-86082","ts":1789353317081,"field":"cvss","old":"6.5","new":"7.1"},{"seq":181531,"id":"CVE-2026-86082","ts":1789353317081,"field":"severity","old":"medium","new":"high"},{"seq":180325,"id":"CVE-2026-86082","ts":1789350284100,"field":"cvss","old":"7.1","new":"6.5"},{"seq":180324,"id":"CVE-2026-86082","ts":1789350284100,"field":"severity","old":"high","new":"medium"},{"seq":179118,"id":"CVE-2026-86082","ts":1789348292246,"field":"cvss","old":"6.5","new":"7.1"},{"seq":179117,"id":"CVE-2026-86082","ts":1789348292246,"field":"severity","old":"medium","new":"high"},{"seq":177911,"id":"CVE-2026-86082","ts":1789346369398,"field":"cvss","old":"7.1","new":"6.5"},{"seq":177910,"id":"CVE-2026-86082","ts":1789346369398,"field":"severity","old":"high","new":"medium"},{"seq":176704,"id":"CVE-2026-86082","ts":1789343183903,"field":"cvss","old":"6.5","new":"7.1"},{"seq":176703,"id":"CVE-2026-86082","ts":1789343183903,"field":"severity","old":"medium","new":"high"},{"seq":174821,"id":"CVE-2026-86082","ts":1789334875031,"field":"cvss","old":"7.1","new":"6.5"},{"seq":174820,"id":"CVE-2026-86082","ts":1789334875031,"field":"severity","old":"high","new":"medium"},{"seq":173616,"id":"CVE-2026-86082","ts":1789333686213,"field":"cvss","old":"6.5","new":"7.1"},{"seq":173615,"id":"CVE-2026-86082","ts":1789333686213,"field":"severity","old":"medium","new":"high"},{"seq":172430,"id":"CVE-2026-86082","ts":1789331092387,"field":"cvss","old":"7.1","new":"6.5"},{"seq":172429,"id":"CVE-2026-86082","ts":1789331092387,"field":"severity","old":"high","new":"medium"},{"seq":171244,"id":"CVE-2026-86082","ts":1789328780269,"field":"cvss","old":"6.5","new":"7.1"},{"seq":171243,"id":"CVE-2026-86082","ts":1789328780269,"field":"severity","old":"medium","new":"high"},{"seq":170039,"id":"CVE-2026-86082","ts":1789327196536,"field":"cvss","old":"7.1","new":"6.5"},{"seq":170038,"id":"CVE-2026-86082","ts":1789327196536,"field":"severity","old":"high","new":"medium"}]}