n8n
n8n is ## Impact The OpenAI Chat Model node checked a custom base URL against the credential's allowed-domains configuration before sending a request, but the model-search dropdown did not. A request set.... It is ranked #1570 on the Dev Radar, in Security, first seen 11 days ago and shared in 1 post (127 views).
Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node · Advisory · n8n-io/n8n · GitHub Skip to content Navigation Menu Sign in Appearance settings Search / Sign in Sign up Appearance settings You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert {{ message }} n8n-io / n8n Public Notifications You must be signed in to change notification settings Fork 60.8k Star 205k Domain-Restriction Bypass via Unguarded Model-Search…
What people said about n8n on X
n8n OpenAI Chat Model、ドメイン制限がモデル検索だけ未適用。カスタム baseURL で資格情報が別ホストへ。未認証RCEではない。要編集権限。修正 1.123.76 / 2.37.7 / 2.38.2。CVE-2026-86082 High 7.1 https://github.com/n8n-io/n8n/security/advisories/GHSA-34ff-336r-5q23
— @Lycoris_Arch, 11 days ago · 1 likes · see the post
Alternatives to n8n
- Cloudflare Blog — Use production traffic and security signals to prioritize findings, prepare edge mitigations when safe, and propose…
- security-audit-skill — A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings -…
- bigdiskbuster — Windows Defender Update Denial of Service Vulnerability - MSNightmare/BigDiskBuster
- TheDAO Security Fund — Ecosystem-funded Ethereum security initiatives. Browse open initiatives, donate by wallet or from an exchange, back…
- degdid — Deletes all instances of Microsoft's GDID and prevents minting of new ones - yegors/deGDID
- InCountry — Secure sensitive data across borders and AI applications with InCountry. Enforce data residency, data minimization,…
n8n in numbers
- Rank on the Dev Radar: #1570 of 1886
- Shared in 1 post by 1 account: @Lycoris_Arch
- 127 views on those posts
- First seen 11 days ago, last shared 11 days ago
- Pricing seen by Jev: open source
- Market: Security
FAQ
What is n8n?
## Impact The OpenAI Chat Model node checked a custom base URL against the credential's allowed-domains configuration before sending a request, but the model-search dropdown did not. A request set... It was first shared on X 11 days ago and is ranked #1570 on the Dev Radar.
Is n8n free?
It is open source.
Who shared n8n?
1 account on X, including @Lycoris_Arch, in 1 post totalling 127 views.
Every post is read and classified by Jev (TypeSafe): what it is, which market it belongs to, and whether the link is a real tool. 17k posts from 4.9k X accounts over the last 21 days, 1.9k tools, 12 markets. Collected every 5 minutes, fully re-ranked every hour — last update 2026-09-20 22:16 UTC. Full method.