https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T02:16:16.841774+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-72768 fkie_cve-2026-72768 2026-10-01T02:16:16.962665+00:00

n8n versions before 2.32.1 contain a server-side request forgery protection bypass vulnerability in the MCP Client node that allows authenticated users to bypass SSRF protections. Attackers can craft workflows that send requests to internal or blocked hosts without routing through SSRF protection, exposing internal services and reading responses back through the workflow.

 https://vulnerability.circl.lu/vuln/ghsa-xv2r-whj9-7vqh GHSA-xv2r-whj9-7vqh 2026-10-01T02:16:16.962764+00:00

n8n versions before 2.32.1 contain a server-side request forgery protection bypass vulnerability in the MCP Client node that allows authenticated users to bypass SSRF protections. Attackers can craft workflows that send requests to internal or blocked hosts without routing through SSRF protection, exposing internal services and reading responses back through the workflow.