7 matches found
GHSA-Q5WM-MGQX-FV2F n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content
Impact Instance AI credential setup accepted a credential test/verification URL without checking it matched the workflow node's origin. Exfiltration required the user to actively inject an attacker-controlled URL into the setup flow. The patch derives the credential destination from the node's ow...
5.9CVSS5.5AI score0.00277EPSS
SaveExploits0References5
20