CVE-2026-72768 is a server-side request forgery protection bypass vulnerability affecting n8n versions before 2.32.1. The flaw exists in the MCP Client node, allowing authenticated users to bypass SSRF protections by crafting workflows that send requests directly to internal or blocked hosts. This bypass exposes internal services and allows attackers to read responses through the workflow execution. The vulnerability has a CVSS 4.0 base score of 6.4, indicating medium severity. No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation depends on vendor updates.

An authenticated attacker can bypass SSRF protections in the MCP Client node, enabling them to send requests to internal or blocked hosts. This can lead to exposure of internal services and data leakage via workflow responses. The vulnerability does not require user interaction and has low attack complexity but requires low privileges. The impact is limited to information disclosure and potential internal network reconnaissance.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the n8n instance to trusted users only and monitor for suspicious workflow creations that may exploit this vulnerability.