CVE-2026-72771

n8n (software) before version 2.32.1 has a credential restriction bypass vulnerability in AI/LLM nodes due to improper enforcement of the Allowed HTTP Request Domains allowlist. When users configure base or endpoint URLs, low-privilege workflow editors with access to shared credentials can redire...