Loading vulnerability…
Credential Exfiltration SSRF in n8n Dynamic Node Parameters Endpoint
CVE-2026-56348 is a critical vulnerability in n8n affecting versions prior to 2.20.0. The flaw resides in the POST /rest/dynamic-node-parameters/options endpoint and allows an authenticated user to bypass the product's Allowed HTTP Request Domains restriction. According to the provided content, the root cause is insufficient permission validation in the refineResourceIds() method, which accepts credential IDs without verifying that the requesting user has credential:read access to those credentials. By supplying credential IDs and abusing the endpoint's dynamic parameter resolution behavior, an attacker can cause the n8n server to make outbound HTTP requests to unauthorized or attacker-controlled hosts while including stored credentials. This results in server-side request forgery behavior combined with credential exfiltration, exposing sensitive authentication material such as API keys, OAuth tokens, passwords, and other secrets stored in n8n.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation allows a low-privileged authenticated user to coerce the n8n server into sending credential-bearing HTTP requests to unauthorized external hosts, resulting in exfiltration of sensitive authentication data. The exposed secrets may include API keys, OAuth tokens, passwords, and other stored credentials, which can then be used to access connected third-party services, cloud platforms, databases, SaaS applications, payment systems, or internal resources. The content indicates confidentiality impact is high, with additional limited integrity and availability impact due to unauthorized outbound requests and potential downstream abuse of stolen credentials.
If you can’t patch tonight, do this now.
If immediate patching is not possible, restrict n8n access to fully trusted users only, reduce or eliminate credential sharing, and limit access to the /rest/dynamic-node-parameters/options endpoint where feasible. Monitor requests to that endpoint and review outbound HTTP connections from the n8n server for unexpected destinations. These measures are temporary risk reductions and do not fully remediate the vulnerability.
Patch, then assume compromise.
Upgrade n8n to version 2.20.0 or later. The provided content states that the fix adds credential access validation in refineResourceIds() using CredentialsFinderService.findCredentialIdsWithScopeForUser() and throws a ForbiddenError when a supplied credential ID fails permission validation. Apply the vendor fix across npm, Docker, and cloud deployments as applicable.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.