Lucene search
+L

7 matches found

OSV
OSV
added 2026/09/10 9:18 p.m.7 views

GHSA-Q5WM-MGQX-FV2F n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content

Impact Instance AI credential setup accepted a credential test/verification URL without checking it matched the workflow node's origin. Exfiltration required the user to actively inject an attacker-controlled URL into the setup flow. The patch derives the credential destination from the node's ow...

5.9CVSS5.5AI score0.00277EPSS
SaveExploits0References5
Rows per page
Query Builder