CVE-2026-86078

n8n (open-source workflow automation platform) is affected by a prototype pollution vulnerability in the Instance AI workflow summary feature prior to versions 2.37.7 and 2.38.2 . The function summarizeWorkflowStructure (in packages/@n8n/instance-ai/src/tools/workflows/summarize-workflow.ts) trea...

CVE-2026-86074 n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content

n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the Instance AI credential setup flow accepted a credential test or verification URL without checking that it matched the workflow node's origin. Attacker-controlled fetched content could influence that URL after a us...

CVE-2026-86074

n8n is an open source workflow automation platform. In versions prior to 2.37.7 and 2.38.2 , the Instance AI credential setup flow accepted a credential test or verification URL without validating that it matched the workflow node's origin. Attacker-controlled fetched content could manipulate tha...