CVE-2026-72771: n8n versions before 2.32.1 fail to enforce the Allowed HTTP Request Domains allowlist in multiple AI and LLM nodes when user-supplied base or endpoint URLs are configured. Low-privileged workflow e...

Added to the CISA Known Exploited Vulnerabilities catalog on 11 Aug 2026. Vendor: AI/ML. Product: LLM. CVSS score: 6.5.

n8n versions before 2.32.1 fail to enforce the Allowed HTTP Request Domains allowlist in multiple AI and LLM nodes when user-supplied base or endpoint URLs are configured. Low-privileged workflow editors with use-only access to shared credentials can redirect requests to attacker-controlled hosts...

Required action: Review and patch if applicable to your AI infrastructure.