CVE-2026-85172

6.4 Moyenne

Publiée le 03/09/2026 à 15:06 · Modifiée le 16/09/2026 à 23:26 · Analysée par le NVD · Source : disclosure@vulncheck.com

Description

n8n versions before 2.34.1 contain a server-side request forgery vulnerability in the legacy request helper function exposed to Code and Function nodes. The validation logic checks the uri property for SSRF safety while the underlying HTTP client uses the url property when both are present, allowing attackers to bypass validation by supplying a safe uri alongside a malicious url to access internal addresses.

Traduire en français

Produits concernés

Scores CVSS

Version	Score	Source	Vecteur
4.0	5.3 Moyenne	disclosure@vulncheck.com	`CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X`
3.1	6.4 Moyenne	nvd@nist.gov (NVD)	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N`

Faiblesses (CWE)

CWE-918

Références

https://github.com/n8n-io/n8n/security/advisories/GHSA-jp9j-jr97-w9pj MitigationVendor Advisory
https://www.vulncheck.com/advisories/n8n-before-2.34.1-ssrf-via-request-helper-uri-validation-bypass Third Party Advisory

CVE-2026-85172

Description

Produits concernés

Scores CVSS

Faiblesses (CWE)

Références

Ailleurs