CVE-2026-86074: n8n Instance AI Credential Setup Vulnerability
Summary
CVE-2026-86074: n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content. Affects n8n across 2 version ranges.
< 2.37.7
>= 2.38.0, < 2.38.2
Fixed in 2.37.7 or 2.38.2, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
n8n is an open-source workflow automation tool that allows users to connect various applications and services to automate tasks. It provides a user-friendly interface for creating workflows that can integrate with APIs, databases, and other services. The tool is designed for flexibility and scalability, making it popular among developers and businesses. However, a vulnerability has been identified in the Instance AI credential setup process, which could potentially expose sensitive data if exploited.
Vulnerability Detail
The vulnerability arises from the Instance AI credential setup accepting an unvalidated probe URL from fetched content. This means that an attacker could inject a malicious URL into the setup flow, leading to potential exfiltration of sensitive information. The flaw is significant as it allows unauthorized access to the workflow node's origin, which could compromise the integrity and confidentiality of the data being processed.
How To Fix
Latest published version: 2.44.6 as of 22 Oct 2026
npm install n8n@2.44.6Upgrading to it may include breaking changes; the versions below are the minimum fixed release for this vulnerability.
If you can't move to the latest
The minimum fixed version depends on the release line you run.
-
< 2.37.72.37.7npm install n8n@2.37.7 -
>= 2.38.0, < 2.38.22.38.2npm install n8n@2.38.2
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
If upgrading is not immediately feasible, administrators can implement the following temporary mitigations:
- Disable the Instance AI module by removing 'instance-ai' from the N8N_ENABLED_MODULES environment variable if it is not required.
- Restrict access to the n8n instance to fully trusted users only.
- Rotate any third-party API credentials that were set up using the Instance AI credential-setup flow on affected versions.
Conclusion
The CVE-2026-86074 vulnerability in n8n poses a moderate risk due to its potential for data exfiltration through unvalidated probe URLs. Users are strongly encouraged to upgrade to the latest patched versions to secure their instances. Temporary workarounds can be employed until an upgrade is possible.
See every vulnerability recorded for n8n →
FAQ
CVE-2026-86074 is a vulnerability in the n8n workflow automation tool that allows unvalidated probe URLs to be accepted during the Instance AI credential setup, potentially leading to data exfiltration.
If you are using n8n versions prior to 2.38.2 or 2.37.7, your instance may be vulnerable. You can check your version by running 'n8n --version' in your terminal.
You can disable the Instance AI module, restrict access to trusted users, and rotate any affected API credentials as temporary mitigations.
If exploited, this vulnerability could allow attackers to exfiltrate sensitive data from your workflows, compromising the security of your applications.
Vulert monitors and alerts in real-time for open-source vulnerabilities using just the package-lock.json file, allowing users to stay informed about potential risks without needing to access the code directly.
Related vulnerabilities
Recent vulnerabilities recorded for n8n.
