internet-facing-service-vulnerabilitywidely-deployed-product-advisorycredential-access-method

Critical n8n SSRF Flaw Exposed Stored Credentials to Authenticated Users

Vulnerability Disclosure · 5 sources · Updated 4mo ago · First seen Jul 7, 2026

A critical server-side request forgery flaw in the n8n workflow automation platform, tracked as CVE-2026-56348, allowed any authenticated user to bypass the product’s Allowed HTTP Request Domains restriction and coerce the server into sending stored credentials to attacker-controlled hosts. The issue affected all versions before 2.20.0 and stemmed from missing credential permission validation in the refineResourceIds() path behind the POST /rest/dynamic-node-parameters/options endpoint, enabling exposure of API keys, OAuth tokens, and passwords without confirming credential:read access.

n8n fixed the vulnerability by adding credential access checks through CredentialsFinderService and returning a ForbiddenError when validation fails, while no public proof-of-concept had been reported at disclosure. Separately, the Canadian Centre for Cyber Security issued an advisory urging organizations to review n8n’s latest vendor notices and apply updates affecting versions prior to 1.123.64, 2.29.8, and 2.30.1, underscoring continued patching requirements across multiple release branches.

Do you run this?See affected versions and whether adversaries are exploiting it.

Check your exposure

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

6 events · Jun 16, 2026 – Jul 8, 2026

Jul 8, 20264mo ago
n8n publishes additional security advisories
On 2026-07-08, n8n published security advisories covering vulnerabilities affecting versions prior to 1.123.64, prior to 2.30.1, and prior to 2.29.8. The Canadian Centre for Cyber Security urged users and administrators to review the vendor advisories and apply updates.
n8n security advisory (AV26-672) - Canadian Centre for Cyber Security
Jun 24, 20264mo ago
CVE-2026-56348 in n8n is publicly disclosed
A critical SSRF vulnerability, CVE-2026-56348, was disclosed in n8n, with reporting noting that exploitation was straightforward for authenticated users and could expose API keys, OAuth tokens, and passwords. As of June 2026, no public proof-of-concept exploit had been reported.
n8n CVE-2026-56348: Credential Exfiltration via SSRF | ThreatAft
Jun 24, 20264mo ago
n8n fixes credential exfiltration SSRF in version 2.20.0
n8n addressed CVE-2026-56348 in version 2.20.0 by adding credential access checks through CredentialsFinderService and returning a ForbiddenError when validation fails. The flaw affected all versions prior to 2.20.0 and allowed authenticated users to bypass Allowed HTTP Request Domains restrictions to exfiltrate stored credentials.
n8n CVE-2026-56348: Credential Exfiltration via SSRF | ThreatAft
Jun 23, 20264mo ago
Attackers begin exploiting Langflow CVE-2026-33017
Active exploitation of CVE-2026-33017 began within about 20 hours of the March 2026 advisory, with attackers conducting scanning, reconnaissance, and credential theft. Reported stolen data included OpenAI and Anthropic API keys, AWS credentials, and database passwords.
Langflow CVE-2026-10561 (CVSS 10.0) Unauthenticated RCE | ThreatAft
Jun 23, 20264mo ago
Langflow advisory issued for CVE-2026-33017
A March 2026 advisory disclosed CVE-2026-33017 in IBM Langflow, affecting versions up to 1.8.1 via the public flow-sharing endpoint that could pass attacker-controlled data into Python exec() without authentication or sandboxing. The issue was fixed in Langflow 1.9.0, but later reporting noted version confusion because 1.9.0 through 1.9.3 remained vulnerable to a different RCE flaw.
Langflow CVE-2026-10561 (CVSS 10.0) Unauthenticated RCE | ThreatAft
Jun 16, 20265mo ago
Perry fixes expired JWT token validation flaw
Perry fixed CVE-2026-53776 in version 0.5.1166 after researchers found that expired bearer tokens could remain valid indefinitely because expiration checking was disabled in the JWT verification path. The flaw affected versions before 0.5.1166 and enabled reuse of previously issued tokens after expiration.
Perry JWT Validation Bypass Expired Token Reuse | ThreatAft

Linked entities

Related entities

Vulnerabilities, threat actors, malware, products, organizations, breaches, and observables Mallory has linked to this story. Indicator values are masked here and available in full in the app.

Open in app →

Vulnerabilities

1 linked

Credential Exfiltration SSRF in n8n Dynamic Node Parameters Endpoint (CVE-2026-56348)

Affected products

1 linked

N8n

Organizations

1 linked

N8n

Observables

4 linked

Indicator values are masked on this page. See the values in Mallory Domains, IPs, hashes, and URLs are exportable to your SIEM.

Do you run this?See whether adversaries are exploiting this yet, and where the affected versions run in your environment.

Check Your Exposure

Source coverage

Sources

5 references tracked. Mallory keeps watching after this page renders.

Ca CcsNews · Jul 8, 2026

n8n security advisory (AV26-672) - Canadian Centre for Cyber SecurityOpen source ↗

Threataft BlogNews · Jun 24, 2026

n8n CVE-2026-56348: Credential Exfiltration via SSRF | ThreatAftOpen source ↗

Threataft BlogNews · Jun 23, 2026

Langflow CVE-2026-10561 (CVSS 10.0) Unauthenticated RCE | ThreatAftOpen source ↗

Threataft BlogNews · Jun 16, 2026

Perry JWT Validation Bypass Expired Token Reuse | ThreatAftOpen source ↗

Github WebNews · Jun 14, 2026

Release v0.5.1166 · PerryTS/perry · GitHubOpen source ↗

Mallory platform

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which threat actors are using it right now, and what to deploy next.

Start Free Trial Open in App

Exposure mappingMap indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidenceEvery observed campaign, victim, and pivot linked to actors named in this story.

Associated malwareMalware, exploits, and IOCs connected to the activity described here.

Detection signaturesYARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alertsGet matching new stories delivered to your team as they break, not the next morning.

AI threadsAsk questions about this story and take action on the answers.

← Back to News

internet-facing-service-vulnerabilitywidely-deployed-product-advisorycredential-access-method

Critical n8n SSRF Flaw Exposed Stored Credentials to Authenticated Users

Vulnerability Disclosure · 5 sources · Updated 4mo ago · First seen Jul 7, 2026

Do you run this?See affected versions and whether adversaries are exploiting it.

Check your exposure

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

6 events · Jun 16, 2026 – Jul 8, 2026

Jul 8, 20264mo ago
n8n publishes additional security advisories
On 2026-07-08, n8n published security advisories covering vulnerabilities affecting versions prior to 1.123.64, prior to 2.30.1, and prior to 2.29.8. The Canadian Centre for Cyber Security urged users and administrators to review the vendor advisories and apply updates.
n8n security advisory (AV26-672) - Canadian Centre for Cyber Security
Jun 24, 20264mo ago
CVE-2026-56348 in n8n is publicly disclosed
A critical SSRF vulnerability, CVE-2026-56348, was disclosed in n8n, with reporting noting that exploitation was straightforward for authenticated users and could expose API keys, OAuth tokens, and passwords. As of June 2026, no public proof-of-concept exploit had been reported.
n8n CVE-2026-56348: Credential Exfiltration via SSRF | ThreatAft
Jun 24, 20264mo ago
n8n fixes credential exfiltration SSRF in version 2.20.0
n8n addressed CVE-2026-56348 in version 2.20.0 by adding credential access checks through CredentialsFinderService and returning a ForbiddenError when validation fails. The flaw affected all versions prior to 2.20.0 and allowed authenticated users to bypass Allowed HTTP Request Domains restrictions to exfiltrate stored credentials.
n8n CVE-2026-56348: Credential Exfiltration via SSRF | ThreatAft
Jun 23, 20264mo ago
Attackers begin exploiting Langflow CVE-2026-33017
Active exploitation of CVE-2026-33017 began within about 20 hours of the March 2026 advisory, with attackers conducting scanning, reconnaissance, and credential theft. Reported stolen data included OpenAI and Anthropic API keys, AWS credentials, and database passwords.
Langflow CVE-2026-10561 (CVSS 10.0) Unauthenticated RCE | ThreatAft
Jun 23, 20264mo ago
Langflow advisory issued for CVE-2026-33017
A March 2026 advisory disclosed CVE-2026-33017 in IBM Langflow, affecting versions up to 1.8.1 via the public flow-sharing endpoint that could pass attacker-controlled data into Python exec() without authentication or sandboxing. The issue was fixed in Langflow 1.9.0, but later reporting noted version confusion because 1.9.0 through 1.9.3 remained vulnerable to a different RCE flaw.
Langflow CVE-2026-10561 (CVSS 10.0) Unauthenticated RCE | ThreatAft
Jun 16, 20265mo ago
Perry fixes expired JWT token validation flaw
Perry fixed CVE-2026-53776 in version 0.5.1166 after researchers found that expired bearer tokens could remain valid indefinitely because expiration checking was disabled in the JWT verification path. The flaw affected versions before 0.5.1166 and enabled reuse of previously issued tokens after expiration.
Perry JWT Validation Bypass Expired Token Reuse | ThreatAft

Linked entities

Related entities

Vulnerabilities, threat actors, malware, products, organizations, breaches, and observables Mallory has linked to this story. Indicator values are masked here and available in full in the app.

Open in app →