CVE-2026-86074: n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content

Instance AI credential setup accepted a credential test/verification URL without checking it matched the workflow node’s origin. Exfiltration required the user to actively inject an attacker-controlled URL into the setup flow. The patch derives the credential destination from the node’s own URL and confines authenticated requests, redirects and probes to that origin.