Server-Side Request Forgery Vulnerability in n8n by n8n.io

CVE-2026-85172

What is CVE-2026-85172?

The legacy request helper function in n8n versions prior to 2.34.1 is susceptible to a server-side request forgery vulnerability. The flaw arises due to improper validation of the 'uri' property, which is supposed to ensure SSRF safety. Attackers can exploit this by providing a benign 'uri' along with a malicious 'url', exploiting the underlying HTTP client's reliance on the latter for connection establishment. This allows unauthorized access to internal resources, which could significantly compromise server integrity and confidentiality.

References