Medium severity6.5NVD Advisory· Published Aug 20, 2026· Updated Sep 1, 2026
CVE-2026-77085
CVE-2026-77085
Description
n8n before 2.34.1 and 2.33.x before 2.33.4 contains an SSRF protection bypass in the SearXNG Agent tool. The tool sent requests to the user-supplied API URL using a raw HTTP client that did not route through n8n's centralized SSRF protection. On instances with N8N_SSRF_PROTECTION_ENABLED=true, an authenticated user with permission to create SearXNG credentials and configure a personal agent could set the API URL to an internal host, causing the n8n server to connect to that host and return the response content through the Agent chat output.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
2- github.com/n8n-io/n8n/security/advisories/GHSA-9rp2-wm75-c5fjnvdMitigationVendor Advisory
- www.vulncheck.com/advisories/n8n-before-ssrf-protection-bypass-via-searxng-toolnvdThird Party Advisory
News mentions
1- N8n: 18 Vulnerabilities Including Code Execution and SSRF Disclosed in BatchVypr Intelligence · Aug 20, 2026