CVE-2026-85170: n8n before 1.123.73 Local File Read and SSRF via Gmail and Brevo nodes
n8n versions before 1.123.73, 2.35.4, and 2.36.2 pass message content in the Gmail (v1) and Brevo nodes to the mail composer without verifying it is a string. An authenticated user able to run a workflow can supply an expression that resolves to an object carrying a path or href property, causing the composer to read a local file accessible to the n8n process or fetch an internal URL (SSRF) and attach the result to the outgoing message.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
n8nto a version that resolves this vulnerability.Fixed in 1.123.73 - Upgrade
Upgrade
n8nto a version that resolves this vulnerability.Fixed in 2.35.4 - Upgrade
Upgrade
n8nto a version that resolves this vulnerability.Fixed in 2.36.2
Event History
Frequently Asked Questions
What access must an attacker have?
The attacker must be authenticated and able to run a workflow. Exploitation requires supplying an expression that resolves to an object with a path or href property.
Which deployments are relevant to this issue?
The issue applies to workflows using the Gmail v1 or Brevo nodes where message content reaches the mail composer. Deployments without authenticated users able to run such workflows are not described as exploitable by the available information.
What could an attacker obtain or access?
They may cause the n8n process to read a local file that the process can access, or fetch an internal URL through SSRF. The retrieved content is attached to an outgoing message.
Which versions should be updated?
The affected versions are those before 1.123.73, 2.35.4, and 2.36.2.