n8n npm Package Vulnerability: Domain-Restriction Bypass
EARLY WARNING · UNCONFIRMED. This page describes a developing threat that 0Day surfaced from early signals and has not yet independently confirmed. Details may change. Always verify against the primary sources before acting.
- Severity
- HIGH
- Affected component
- n8n (npm)
- Affected versions
- >= 2.28.0, < 2.28.1 or < 2.27.4 or < 1.123.55 or >= 2.26.0, < 2.26.2 or >= 2.0.0-rc.0, < 2.25.7 or < 1.123.22 or >= 2.0.0, < 2.9.3 or >= 2.10.0, < 2.10.1 or >= 2.26.0, < 2.26.2 or < 2.25.7 or < 2.19.3 or < 1.123.67 or >= 2.32.0, < 2.32.1 or >= 2.0.0-rc.0, < 2.31.5 or < 1.121.0 or < 2.28.0 or < 2.27.4 or < 1.123.76 or >= 2.38.0, < 2.38.2 or >= 2.0.0, < 2.37.7 or >= 2.38.0, < 2.38.2 or < 2.37.7 or < 1.123.64 or >= 2.30.0, < 2.30.1 or >= 2.0.0-rc.0, < 2.29.8 or >= 2.7.0, < 2.8.0 or < 2.6.4 or <= 1.114.4 or < 2.20.0 or < 1.123.18 or >= 2.0.0, < 2.6.2 or < 1.123.27 or >= 2.14.0, < 2.14.1 or >= 2.14.0, <= 2.14.0 or >= 2.0.0-rc.0, < 2.13.3 or < 1.123.55 or >= 2.26.0, < 2.26.2 or >= 2.0.0-rc.0, < 2.25.7 or < 2.5.0 or < 1.123.32 or >= 2.18.0, < 2.18.1 or >= 2.17.0, < 2.17.4 or < 1.123.32 or >= 2.18.0, < 2.18.1 or >= 2.0.0, < 2.17.4 or >= 1.65.0, < 1.114.3 or < 1.123.32 or >= 2.18.0, < 2.18.1 or >= 2.17.0, < 2.17.4 or < 1.123.43 or >= 2.21.0, < 2.22.1 or >= 2.0.0-rc.0, < 2.20.7 or < 1.114.0 or >= 2.14.0, < 2.14.1 or >= 2.14.0, <= 2.14.0 or >= 2.0.0-rc.0, < 2.13.3 or < 1.123.27 or < 1.123.76 or >= 2.38.0, < 2.38.2 or >= 2.0.0, < 2.37.7 or < 1.98.0 or < 1.123.48 or >= 2.22.0, < 2.22.4 or >= 2.0.0-rc.0, < 2.21.8 or < 1.123.17 or >= 2.0.0, < 2.4.5 or >= 2.5.0, < 2.5.1 or >= 1.0.0, < 2.0.0 or >= 2.32.0, < 2.32.1 or < 2.31.5 or < 1.123.67 or >= 2.32.0, < 2.32.1 or >= 2.0.0-rc.0, < 2.31.5 or < 1.123.76 or >= 2.38.0, < 2.38.2 or >= 2.0.0, < 2.37.7 or < 1.123.55 or >= 2.26.0, < 2.26.2 or >= 2.0.0-rc.0, < 2.25.7 or >= 2.38.0, < 2.38.2 or < 2.37.7 or < 1.123.17 or >= 2.0.0, < 2.5.2 or < 1.123.43 or >= 2.21.0, < 2.21.1 or >= 2.0.0-rc.0, < 2.20.7 or < 1.123.67 or >= 2.32.0, < 2.32.1 or >= 2.0.0-rc.0, < 2.31.5 or < 1.123.76 or >= 2.38.0, < 2.38.2 or >= 2.0.0, < 2.37.7 or < 1.123.32 or >= 2.18.0, < 2.18.1 or >= 2.0.0, < 2.17.4 or < 1.123.22 or >= 2.0.0, < 2.9.3 or >= 2.10.0, < 2.10.1 or < 1.123.61 or >= 2.28.0, < 2.28.1 or >= 2.0.0-rc.0, < 2.27.4 or >= 2.30.0, < 2.30.1 or < 2.29.8 or >= 0.187.0, < 1.120.3 or >= 2.38.0, < 2.38.2 or < 2.37.7 or >= 1.123.0, < 1.123.2 or < 1.122.5 or >= 2.32.0, < 2.32.1 or < 2.31.5 or < 2.4.8 or < 1.123.64 or >= 2.30.0, < 2.30.1 or >= 2.0.0-rc.0, < 2.29.8 or < 0.216.1 or < 1.123.26 or >= 2.14.0, < 2.14.1 or >= 2.14.0, <= 2.14.0 or >= 2.0.0-rc.0, < 2.13.3 or >= 2.26.0, < 2.26.2 or < 2.25.7 or < 1.123.67 or >= 2.32.0, < 2.32.1 or >= 2.0.0-rc.0, < 2.31.5 or >= 2.0.0, < 2.5.0 or < 1.123.10 or < 1.123.48 or >= 2.22.0, < 2.22.4 or >= 2.0.0-rc.0, < 2.21.8 or < 1.123.64 or >= 2.30.0, < 2.30.1 or >= 2.0.0-rc.0, < 2.29.8 or < 1.123.64 or >= 2.30.0, < 2.30.1 or >= 2.0.0-rc.0, < 2.29.8 or < 1.123.64 or >= 2.30.0, < 2.30.1 or >= 2.0.0-rc.0, < 2.29.8 or >= 2.26.0, < 2.26.2 or < 2.25.7 or >= 2.0.0-rc.0, < 2.4.0 or < 1.121.0 or < 1.90.0 or < 1.123.43 or >= 2.21.0, < 2.22.1 or >= 2.0.0-rc.0, < 2.20.7 or < 1.123.67 or >= 2.32.0, < 2.32.1 or >= 2.0.0-rc.0, < 2.31.5 or >= 2.38.0, < 2.38.2 or < 2.37.7 or >= 2.38.0, < 2.38.1 or < 2.37.7 or < 1.123.76 or >= 2.38.0, < 2.38.2 or >= 2.0.0, < 2.37.7 or < 2.4.0 or < 1.123.32 or >= 2.18.0, < 2.18.1 or >= 2.0.0, < 2.17.4 or < 1.123.32 or >= 2.18.0, < 2.18.1 or >= 2.0.0, < 2.17.4 or >= 2.30.0, < 2.30.1 or < 2.29.8 or < 2.10.0 or < 1.123.23 or >= 2.0.0-rc.0, < 2.6.4 or < 1.123.64 or >= 2.30.0, < 2.30.1 or >= 2.0.0-rc.0, < 2.29.8 or < 1.123.67 or >= 2.32.0, < 2.32.1 or >= 2.0.0-rc.0, < 2.31.5 or >= 2.0.0, < 2.5.0 or < 1.123.18 or < 1.106.0 or < 1.99.1 or < 1.123.64 or >= 2.30.0, < 2.30.1 or >= 2.0.0, < 2.29.8 or >= 2.32.0, < 2.32.1 or < 2.31.5 or >= 2.26.0, < 2.26.2 or < 2.25.7 or >= 2.28.0, < 2.28.1 or < 2.27.4 or < 2.24.0 or >= 1.77.0, < 1.98.2 or >= 2.38.0, < 2.38.2 or < 2.37.7 or < 1.123.32 or >= 2.18.0, < 2.18.1 or >= 2.0.0, < 2.17.4 or >= 2.18.0, < 2.18.1 or >= 2.17.0, < 2.17.4 or < 1.123.32 or < 1.118.0 or >= 2.0.0, < 2.4.0 or < 1.123.55 or >= 2.26.0, < 2.26.2 or >= 2.0.0-rc.0, < 2.25.7 or < 1.123.76 or >= 2.38.0, < 2.38.2 or >= 2.0.0, < 2.37.7 or < 1.123.61 or >= 2.28.0, < 2.28.1 or >= 2.0.0-rc.0, < 2.27.4 or < 1.123.67 or >= 2.32.0, < 2.32.1 or >= 2.0.0-rc.0, < 2.31.5 or >= 1.2.1, < 2.0.0 or < 1.123.76 or >= 2.38.0, < 2.38.2 or >= 2.0.0, < 2.37.7 or >= 0.150.0, < 2.2.2 or < 1.123.22 or >= 2.0.0, < 2.9.3 or >= 2.10.0, < 2.10.1 or < 1.123.22 or >= 2.0.0, < 2.9.3 or >= 2.10.0, < 2.10.1 or < 1.123.61 or >= 2.28.0, < 2.28.1 or >= 2.0.0-rc.0, < 2.27.4 or < 2.24.0 or < 2.24.0 or < 1.123.67 or >= 2.32.0, < 2.32.1 or >= 2.0.0-rc.0, < 2.31.5 or >= 2.26.0, < 2.26.2 or < 2.25.7 or >= 2.26.0, < 2.26.2 or < 2.25.7 or < 1.123.27 or >= 2.14.0, < 2.14.1 or >= 2.14.0, <= 2.14.0 or >= 2.0.0-rc.0, < 2.13.3 or >= 2.0.0, < 2.4.0 or < 1.123.12 or < 1.123.43 or >= 2.21.0, < 2.21.1 or >= 2.0.0-rc.0, < 2.20.7 or < 1.123.22 or >= 2.0.0, < 2.9.3 or >= 2.10.0, < 2.10.1 or < 1.123.32 or >= 2.18.0, < 2.18.1 or >= 2.0.0, < 2.17.4 or >= 2.28.0, < 2.28.1 or < 2.27.4 or < 1.123.15 or >= 2.0.0, < 2.5.0 or >= 1.24.0, < 1.107.0 or >= 2.14.0, < 2.14.1 or >= 2.14.0, <= 2.14.0 or >= 2.0.0-rc.0, < 2.13.3 or < 1.123.27 or < 1.123.64 or >= 2.30.0, < 2.30.1 or >= 2.0.0-rc.0, < 2.29.8 or < 0.216.1 or >= 2.32.0, < 2.32.1 or < 2.31.5 or < 1.123.76 or >= 2.38.0, < 2.38.2 or >= 2.0.0, < 2.37.7 or < 1.123.64 or >= 2.30.0, < 2.30.1 or >= 2.0.0-rc.0, < 2.29.8 or < 1.123.55 or >= 2.26.0, < 2.26.2 or >= 2.0.0-rc.0, < 2.25.7 or < 1.123.76 or >= 2.38.0, < 2.38.2 or >= 2.0.0, < 2.37.7 or < 1.99.0 or < 1.123.61 or >= 2.28.0, < 2.28.1 or >= 2.0.0-rc.0, < 2.27.4 or >= 2.0.0-rc.0, < 2.11.2 or < 1.123.25 or < 1.123.32 or >= 2.18.0, < 2.18.1 or >= 2.17.0, < 2.17.4 or >= 2.38.0, < 2.38.2 or < 2.37.7 or >= 2.30.0, < 2.30.1 or < 2.29.8 or < 1.123.27 or >= 2.14.0, < 2.14.1 or >= 2.14.0, <= 2.14.0 or >= 2.0.0-rc.0, < 2.13.3 or < 1.123.76 or >= 2.38.0, < 2.38.2 or >= 2.0.0, < 2.37.7 or >= 2.0.0, < 2.2.1 or < 1.123.9 or >= 2.26.0, < 2.26.2 or < 2.25.7 or >= 2.17.0, < 2.17.5 or < 1.123.33 or < 1.123.32 or >= 2.18.0, < 2.18.1 or >= 2.0.0, < 2.17.4 or < 0.216.1 or < 1.123.67 or >= 2.32.0, < 2.32.1 or >= 2.0.0-rc.0, < 2.31.5 or < 1.123.55 or >= 2.26.0, < 2.26.1 or >= 2.0.0-rc.0, < 2.25.7 or >= 0.123.0, < 1.121.3 or >= 1.65.0, < 1.121.0 or < 1.123.55 or >= 2.26.0, < 2.26.2 or >= 2.0.0-rc.0, < 2.25.7 or >= 0.211.0, < 1.120.4 or >= 1.121.0, < 1.121.1 or >= 2.32.0, < 2.32.1 or < 2.31.5 or < 2.8.0 or < 1.123.22 or >= 2.0.0, < 2.9.3 or >= 2.10.0, < 2.10.1 or < 2.8.0 or >= 2.11.0, < 2.12.0 or >= 2.0.0-rc.0, < 2.10.4 or < 1.123.24 or < 1.123.27 or >= 2.14.0, < 2.14.1 or >= 2.14.0, <= 2.14.0 or >= 2.0.0-rc.0, < 2.13.3 or >= 2.0.0, < 2.28.0 or < 1.123.58 or >= 1.36.0, < 2.2.0 or >= 0.123.1, < 1.119.2 or < 1.123.43 or >= 2.21.0, < 2.22.1 or >= 2.0.0-rc.0, < 2.20.7 or < 1.123.22 or >= 2.0.0, < 2.9.3 or >= 2.10.0, < 2.10.1 or < 1.123.8 or >= 2.0.0, < 2.2.0 or >= 2.30.0, < 2.30.1 or < 2.29.8 or < 2.24.0 or < 1.113.0 or < 1.123.67 or >= 2.32.0, < 2.32.1 or >= 2.0.0-rc.0, < 2.31.5 or < 1.123.22 or >= 2.10.0, < 2.10.1 or >= 2.0.0-rc.0, < 2.9.3 or < 1.123.67 or >= 2.32.0, < 2.32.1 or >= 2.0.0-rc.0, < 2.31.5
- Patched version
- 1.123.76, 2.37.7, 2.38.2
GHSA-34FF-336R-5Q23
The n8n npm package reportedly contains a domain-restriction bypass vulnerability that could allow unauthorized requests to reach arbitrary hosts. Users of affected versions should take immediate action.
What happened
An early warning has been issued for a critical vulnerability in the n8n npm package. The vulnerability, tracked as GHSA-34FF-336R-5Q23, involves a domain-restriction bypass via an unguarded model-search endpoint in the OpenAI Chat Model node. This flaw could allow requests to reach arbitrary hosts, bypassing domain restrictions configured by administrators.
The vulnerability affects multiple versions of the n8n package, as detailed in the affected components section. It is not yet confirmed if this vulnerability has been exploited in the wild. Users are advised to consult the primary sources for the most current information.
What to do about it
- Identify the version of n8n currently in use in your environment.
- Check if your version is within the affected range as specified in the threat data.
- If affected, upgrade to n8n version 1.123.76, 2.37.7, or 2.38.2 or later to mitigate the vulnerability.
- Monitor the primary sources for updates on the vulnerability and any additional mitigation advice.
How 0Day would have caught this
MATCHED TO YOUR ACTUAL DEPENDENCY GRAPH0Day matches every incoming threat signal against your GitHub organization’s full dependency graph, including transitive dependencies. If
n8n is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.
Frequently asked questions
Am I affected?
You are affected if you are using a version of n8n that falls within the affected range specified in the threat data.
What should I do right now?
Immediately check your n8n version and upgrade to a patched version if you are affected.
Has this vulnerability been patched?
Yes, the vulnerability has been addressed in versions 1.123.76, 2.37.7, and 2.38.2.