A significant security flaw has been discovered in n8n, an open-source workflow automation tool. This vulnerability, identified as CVE-2026-72771, allows low-privileged users to bypass critical security measures, potentially leading to the theft of sensitive credentials. It affects how n8n handles connections within its AI and Large Language Model (LLM) nodes, putting shared secrets at risk.<\/p>\n
Product:<\/strong> n8n<\/p>\n Published:<\/strong> August 11, 2026<\/p>\n Severity:<\/strong> High (CVSS Score: 7.1)<\/p>\n Status:<\/strong> Analyzed<\/p>\n This vulnerability impacts n8n Community and Enterprise editions. Specifically, all versions of n8n prior to 2.31.5<\/strong> and 2.32.1<\/strong> are at risk. Users running any version before these patched releases should take immediate action.<\/p>\n The vulnerability has been thoroughly analyzed, and the details, including potential impacts and solutions, are publicly available. This allows users to understand the risk and apply necessary fixes.<\/p>\n Rated as “High” severity with a CVSS score of 7.1, this vulnerability poses a serious threat. The ability for a low-privileged workflow editor to exfiltrate sensitive credentials means that an attacker could gain unauthorized access to underlying services connected to n8n. This could lead to data breaches, unauthorized operations, and further compromise of your systems. While user interaction is not required by the attacker for exploitation, it does rely on the attacker having low-privileged access to workflow editing and shared credentials.<\/p>\n The good news is that n8n has already released patches to address this critical flaw. Users are strongly advised to update their installations without delay:<\/p>\n If an immediate upgrade isn’t feasible, temporary mitigation steps can help reduce the risk, though they do not fully eliminate it:<\/p>\n These workarounds should be considered short-term measures while you plan and execute your upgrade to a patched version.<\/p>\n https:\/\/github.com\/n8n-io\/n8n\/security\/advisories\/GHSA-64xh-79j6-r5v8<\/p>\n https:\/\/www.vulncheck.com\/advisories\/n8n-before-credential-restriction-bypass-via-ai-llm-nodes<\/p>\n","protected":false},"excerpt":{"rendered":" Understanding the n8n AI\/LLM Node Security Bypass A significant security flaw has been discovered in n8n, an open-source workflow automation tool. This vulnerability, identified as CVE-2026-72771, allows low-privileged<\/p>\n","protected":false},"author":17,"featured_media":3515,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1371,1089,732,1067,1070],"class_list":["post-4424","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-ai-security","tag-credential-exfiltration","tag-cybersecurity","tag-n8n","tag-vulnerability-management"],"yoast_head":"\nAffected Products<\/h2>\n
Current Status<\/h2>\n
Severity Level<\/h2>\n
Possible Solutions<\/h2>\n
\n
\n
References<\/h2>\n