---
id: "GHSA-c772-hjfp-gfc2"
page: "https://infrastack.ai/live/GHSA-c772-hjfp-gfc2"
kind: "vulnerability"
aliases: ["GHSA-c772-hjfp-gfc2"]
title: "Integration Nodes Send Authenticated Requests to Unintended API Endpoints"
severity: "medium"
cvss: 5.3
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: [{"name": "n8n", "fixed": ["1.123.96"], "affected": "< 1.123.96", "ecosystem": "npm"}, {"name": "n8n", "fixed": ["3.2.2"], "affected": "< 3.2.2", "ecosystem": "npm"}, {"name": "n8n", "fixed": ["2.48.3"], "affected": "< 2.48.3", "ecosystem": "npm"}, {"name": "n8n", "fixed": ["2.47.6"], "affected": "< 2.47.6", "ecosystem": "npm"}]
ecosystems: ["npm"]
tags: ["ai-tooling", "n8n", "self-hosted", "webhooks"]
not_affected_if: ["no-untrusted-input-in-id-parameters", "patched-version"]
published_at: "2026-11-13T10:55:41+00:00"
first_seen_at: "2026-11-13T11:06:24+00:00"
updated_at: "2026-11-13T11:07:01+00:00"
sources: [{"source": "ghsa-repo", "url": "https://github.com/n8n-io/n8n/security/advisories/GHSA-c772-hjfp-gfc2", "first_seen_at": "2026-11-13T11:06:24+00:00"}]
exploit_sources: []
---

# Integration Nodes Send Authenticated Requests to Unintended API Endpoints

Link for people: https://infrastack.ai/live/GHSA-c772-hjfp-gfc2 (this .md is for agents)

Several n8n integration nodes build API request paths from unencoded parameters such as record or table IDs, so relative path segments can redirect a request to another endpoint of the same service. An attacker who can feed untrusted input, such as a webhook body, into those parameters can read, modify or delete resources using the node's stored credential.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- npm:n8n affected < 1.123.96 fixed 1.123.96
- npm:n8n affected < 3.2.2 fixed 3.2.2
- npm:n8n affected < 2.48.3 fixed 2.48.3
- npm:n8n affected < 2.47.6 fixed 2.47.6

## How to check

- Check the n8n version with `n8n --version` or the package.json of the n8n install.
- Find workflows whose node parameters for record, table or resource IDs use expressions that include webhook or other external data.

## Fix

- Upgrade n8n to `1.123.96`, `2.47.6`, `2.48.3` or `3.2.2` or later, matching your release line.

## Timeline

- 2026-11-13T11:06:24+00:00 ghsa-repo https://github.com/n8n-io/n8n/security/advisories/GHSA-c772-hjfp-gfc2

## Documents

- [advisory] Maintainer's advisory: github.com https://github.com/n8n-io/n8n/security/advisories/GHSA-c772-hjfp-gfc2

## From the sources

## Impact

Multiple n8n nodes built the URL path of their API requests from node parameters such as record, table or resource IDs. These values were not encoded, so a value containing relative path segments could change which endpoint of the same service the request reached. Where a workflow passed untrusted input, such as a webhook body, into one of these parameters, a caller could make the node read, modify or delete resources outside the workflow's intended scope, with the privileges of the node's stored credential.

## Patches

The issue has been fixed in n8n versions 1.123.96, 2.47.6, 2.48.3 and 3.2.2. Users should upgrade to one of these versions or later to remediate the vulnerability.

## Workarounds

If upgrading is not immediately possible, administrators should consider the following temporary mitigations:
- Restrict n8n instance access to fully trusted users only.
- Audit active workflows and ensure that node parameters holding record, table or resource IDs do not incorporate untrusted external data via expressions.
- Apply network-level controls to restrict access to webhook endpoints that feed into these workflows.
- Limit the permissions of the credentials used by affected workflows to the resources those workflows need.
- Deactivate affected workflows until the instance is patched.

These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_