---
id: GHSA-64xh-79j6-r5v8
title: >-
  n8n: Bypass "Allowed HTTP Request Domains" Credential Restriction in Multiple
  AI and LLM Nodes
summary: >-
  n8n: Bypass "Allowed HTTP Request Domains" Credential Restriction in Multiple
  AI and LLM Nodes
severity: high
cwe:
  - CWE-863
vendor: n8n
product: n8n
ecosystem: npm
affected:
  - 'n8n >= 2.32.0, < 2.32.1'
  - n8n < 2.31.5
patched:
  - n8n 2.32.1
  - n8n 2.31.5
published: '2026-07-22'
updated: '2026-07-22'
source: GHSA
sourceUrl: 'https://github.com/advisories/GHSA-64xh-79j6-r5v8'
references:
  - url: 'https://github.com/n8n-io/n8n/security/advisories/GHSA-64xh-79j6-r5v8'
  - url: >-
      https://github.com/n8n-io/n8n/commit/f69dfc6dd2178a14ea1624d2e1d403c2e755042f
  - url: 'https://github.com/n8n-io/n8n/releases/tag/n8n@2.31.5'
  - url: 'https://github.com/n8n-io/n8n/releases/tag/n8n@2.32.1'
  - url: 'https://github.com/advisories/GHSA-64xh-79j6-r5v8'
tags:
  - ghsa
  - npm
ingestedAt: '2026-07-22T22:06:57.283Z'
---

## Overview

## Impact

The credential "Allowed HTTP Request Domains" allowlist was intended to restrict which hosts a credential's secret could be sent to, protecting shared credentials from users who could use but not view them. Several AI/LLM nodes did not enforce this allowlist when a user-supplied base or endpoint URL was set. A low-privileged workflow editor with use-only access to such a shared credential could point one of these nodes at an attacker-controlled host and cause the credential secret to be transmitted there, then reuse it against the underlying service.

Only instances where a credential has "Allowed HTTP Request Domains" configured and is shared with non-owner users are affected.

## Patches
The issue has been fixed in n8n versions 2.31.5 and 2.32.1. Users should upgrade to one of these versions or later to remediate the vulnerability.

## Workarounds
If upgrading is not immediately possible, administrators should consider the following temporary mitigations:
- Restrict workflow creation and editing permissions to fully trusted users only.
- Restrict credential sharing to fully trusted users only.
- Audit credentials with domain restrictions for unexpected sharing relationships.

These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.

## Affected packages

- `n8n >= 2.32.0, < 2.32.1`
- `n8n < 2.31.5`

## Remediation

Upgrade to a patched release:

- `n8n 2.32.1`
- `n8n 2.31.5`