CVE-2026-59207: n8n 2.28.0

Affected technology

n8n · before 2.27.4 (exclusive)
n8n

n8n · 2.28.0
n8n

n8n · >= 2.28.0, < 2.28.1, < 2.27.4
n8n-io

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

The source says prior to 2.27.4 and 2.28.1, the AI Agents feature did not enforce the Allowed HTTP Request Domains restriction configured on credentials when an MCP tool was pointed at an arbitrary URL, allowing a member-level user with use-only access to a shared credential to send its secret to an external server they control. Vendor/CNA’s CVSS 4.0 assessment (base score 7.1/10) rates confidentiality impact as high; integrity impact as low; availability impact as none.