CVE-2026-86074

n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the Instance AI credential setup flow accepted a credential test or verification URL without checking that it matched the workflow node's origin. Attacker-controlled fetched content could influence that URL after a user injected it into the setup flow, causing authenticated requests, redirects, or probes to reach another origin. The affected logic includes packages/@n8n/instance-ai/src/tools/workflows/credential-utils.ts and the extractServiceOrigin origin derivation. This issue is fixed in versions 2.37.7 and 2.38.2.

• CWE-918

• https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7Release Notes
• https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2Release Notes
• https://github.com/n8n-io/n8n/security/advisories/GHSA-q5wm-mgqx-fv2fMitigation, Vendor Advisory

Published

Sep 8, 2026

Last Modified

Sep 11, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-86064Klever-Go is the Go implementation of the Klever blockchain …8.6
• CVE-2026-86065Klever-Go is the Go implementation of the Klever blockchain …7.5
• CVE-2026-86066Horilla is an HR and CRM software. Prior to 2.0.0, approve_v…5.9
• CVE-2026-8607The Points Management System For Gamification, Ranks, Badges…6.4
• CVE-2026-86071Junrar is an open source Java RAR archive library. Prior to …3.7
• CVE-2026-86073n8n is an open source workflow automation platform. Prior to…7.6
• CVE-2026-86075n8n is an open source workflow automation platform. Prior to…7.5
• CVE-2026-86076n8n is an open source workflow automation platform. Prior to…8.8
• CVE-2026-86077n8n is an open source workflow automation platform. Prior to…6.5
• CVE-2026-86078n8n is an open source workflow automation platform. Prior to…6.5
• CVE-2026-86079n8n is an open source workflow automation platform. Prior to…6.5
• CVE-2026-8608The Event Monster – Event Management, Events Calendar, Ticke…5.3