{"id":"GHSA-64xh-79j6-r5v8","title":"n8n: Bypass \"Allowed HTTP Request Domains\" Credential Restriction in Multiple AI and LLM Nodes","summary":"n8n: Bypass \"Allowed HTTP Request Domains\" Credential Restriction in Multiple AI and LLM Nodes","severity":"high","cwe":["CWE-863"],"vendor":"n8n","product":"n8n","ecosystem":"npm","affected":["n8n >= 2.32.0, < 2.32.1","n8n < 2.31.5"],"patched":["n8n 2.32.1","n8n 2.31.5"],"published":"2026-07-22","updated":"2026-07-22","source":"GHSA","sourceUrl":"https://github.com/advisories/GHSA-64xh-79j6-r5v8","references":[{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-64xh-79j6-r5v8"},{"url":"https://github.com/n8n-io/n8n/commit/f69dfc6dd2178a14ea1624d2e1d403c2e755042f"},{"url":"https://github.com/n8n-io/n8n/releases/tag/n8n@2.31.5"},{"url":"https://github.com/n8n-io/n8n/releases/tag/n8n@2.32.1"},{"url":"https://github.com/advisories/GHSA-64xh-79j6-r5v8"}],"tags":["ghsa","npm"],"ingestedAt":"2026-07-22T22:06:57.283Z","slug":"GHSA-64xh-79j6-r5v8","body":"## Overview\n\n## Impact\n\nThe credential \"Allowed HTTP Request Domains\" allowlist was intended to restrict which hosts a credential's secret could be sent to, protecting shared credentials from users who could use but not view them. Several AI/LLM nodes did not enforce this allowlist when a user-supplied base or endpoint URL was set. A low-privileged workflow editor with use-only access to such a shared credential could point one of these nodes at an attacker-controlled host and cause the credential secret to be transmitted there, then reuse it against the underlying service.\n\nOnly instances where a credential has \"Allowed HTTP Request Domains\" configured and is shared with non-owner users are affected.\n\n## Patches\nThe issue has been fixed in n8n versions 2.31.5 and 2.32.1. Users should upgrade to one of these versions or later to remediate the vulnerability.\n\n## Workarounds\nIf upgrading is not immediately possible, administrators should consider the following temporary mitigations:\n- Restrict workflow creation and editing permissions to fully trusted users only.\n- Restrict credential sharing to fully trusted users only.\n- Audit credentials with domain restrictions for unexpected sharing relationships.\n\nThese workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.\n\n## Affected packages\n\n- `n8n >= 2.32.0, < 2.32.1`\n- `n8n < 2.31.5`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `n8n 2.32.1`\n- `n8n 2.31.5`","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}