CVE-2026-65596 is an incorrect authorization vulnerability in n8n's GraphQL node affecting versions prior to 1.123.64, from 1.123.64 up to but not including 2.29.8, and from 2.29.8 up to but not including 2.30.1. The vulnerability arises because the GraphQL node does not enforce the "Allowed HTTP Request Domains" restriction on HTTP-based credentials (Header Auth, Basic Auth, Query Auth, OAuth), unlike the HTTP Request node. This allows an authenticated user with workflow creation or editing privileges to configure the node to send requests to attacker-controlled servers, potentially exfiltrating credentials that should be restricted by domain. The issue only impacts credentials that have domain restrictions configured and are usable by users other than the credential owner.

An authenticated user with permission to create or edit workflows can bypass domain restrictions on HTTP-based credentials in the GraphQL node, potentially exfiltrating sensitive credential data to attacker-controlled endpoints. This undermines the intended security controls on credential usage within n8n instances. The impact is limited to instances where domain restrictions are configured on credentials and those credentials are accessible by non-owner users. There are no known exploits in the wild as of the published date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict workflow creation and editing permissions to trusted users only, and review credential configurations to limit usage by non-owner users. Monitor vendor communications for official patches or updates addressing this issue.