Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/07/22 10:06 p.m.•38 views

n8n: Bypass "Allowed HTTP Request Domains" Credential Restriction in Multiple AI and LLM Nodes

Impact The credential "Allowed HTTP Request Domains" allowlist was intended to restrict which hosts a credential's secret could be sent to, protecting shared credentials from users who could use but not view them. Several AI/LLM nodes did not enforce this allowlist when a user-supplied base or...

5.4AI score
SaveExploits0References5Affected Software1
Rows per page
Query Builder