CVE-2026-72771 is an incorrect authorization vulnerability in n8n versions before 2.32.1. The flaw arises because the Allowed HTTP Request Domains allowlist is not properly enforced in multiple AI and LLM nodes when user-supplied base or endpoint URLs are configured. This enables low-privileged workflow editors, who only have use-only access to shared credentials, to redirect HTTP requests to attacker-controlled hosts. Consequently, attackers can exfiltrate credential secrets and reuse them against underlying services, potentially compromising those services.

An attacker with low-privileged workflow editor access can bypass domain restrictions and redirect requests to malicious hosts, leading to credential exfiltration. This can result in unauthorized access to underlying services that rely on the stolen credentials. The vulnerability poses a high risk due to the potential for credential theft and misuse.

A fix is available in n8n version 2.32.1 that enforces the Allowed HTTP Request Domains allowlist correctly. Users should upgrade to version 2.32.1 or later to remediate this vulnerability. Since no official vendor advisory or patch link is provided, verify the patch status with the vendor or official n8n release notes to confirm remediation.