PT-2026-63351 · N8N Io · N8N

Al1Z4Deh · CVE-2026-65593 · Published 2026-07-22 · Updated 2026-07-22

NVD

CVSS v4.0

6.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

n8n versions before 1.123.64 contain a server-side request forgery vulnerability in the dynamic-node-parameters endpoints that lack authorization scopes. Authenticated attackers can supply absolute URLs in routing configuration to override baseURL restrictions and make the n8n server issue HTTP requests to arbitrary internal targets when SSRF protection is disabled.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-65593

Affected Products

N8N

References · 3

• https://github.com/n8n-io/n8n/security/advisories/GHSA-9w78-79q7-r4fp · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-65593 · Security Note
• https://vulncheck.com/advisories/n8n-before-ssrf-via-dynamic-node-parameters · Note