Root cause
SSRF & network boundaries
The new SearXNG helper sends the configured search URL through the global fetch function.
n8n's personal-agent SearXNG fallback bypassed its configured SSRF policy. The repair injects the policy-aware web-search transport into the agent runtime and routes the SearXNG tool through the node request helper.
How AI contributed: Flawed AI-written codePublished Aug 5, 2026 in 
n8n-io/n8nAll 6 findings in this repository
Provisional finding. Full causal and release verification remains incomplete.
Fix
Security fix
The agent runtime injects the policy-aware transport into fallback searches.
Case facts
- CVE ID
- CVE-2026-77085
- GHSA ID
- GHSA-9RP2-WM75-C5FJ
- Published
- Aug 5, 2026
- Severity
- medium
- Language
- TypeScript
- AI tool
Cursor- AI role
- Flawed AI-written code
- Vulnerable release
- >= 2.24.0, < 2.33.4 || 2.34.0
- Fixed release
- 2.33.4 / 2.34.1; mainline 2.35.0
AI-assisted change
AI-assisted changepackages/@n8n/ai-utilities/src/web-search/searxng-search.tssource n8n-io/n8n@09c041d848+18−0
@@ -0,0 +40,18 @@+ const params = new URLSearchParams({+ q: searchQuery,+ format: 'json',+ pageno: '1',+ });++ const response = await fetch(`${normalizedUrl}/search?${params}`, {+ headers: {+ Accept: 'application/json',+ },Show 8 hidden lines
+ });++ if (!response.ok) {+ throw new Error(`SearXNG search failed: ${response.status} ${response.statusText}`);+ }++ const data = (await response.json()) as SearxngApiResponse;+ const maxResults = options.maxResults ?? 5;The new SearXNG helper sends the configured search URL through the global fetch function.
Security fix
Fixpackages/@n8n/ai-utilities/src/web-search/searxng-search.tssource n8n-io/n8n@ca3d42d838+1−1
@@ -41,11 +42,11 @@ q: searchQuery, format: 'json', pageno: '1', }); - const response = await fetch(`${normalizedUrl}/search?${params}`, {+ const response = await fetchImpl(`${normalizedUrl}/search?${params}`, { headers: { Accept: 'application/json', },Show 2 hidden lines
...(options.abortSignal ? { signal: options.abortSignal } : {}), });The repaired helper uses the injected fetch implementation for the search request.
Fixpackages/cli/src/modules/agents/agent-runtime-reconstruction.service.tssource n8n-io/n8n@ca3d42d838+7−0
@@ -374,6 +374,13 @@ instrumentation?.mcpFetch ?? createAiMcpFetch(this.outboundHttp, this.ssrfConfig, this.ssrfProtectionService); + // Transport for fallback web-search calls+ const webSearchFetch = createWebSearchFetch(+ this.outboundHttp,+ this.ssrfConfig,+ this.ssrfProtectionService,Show 5 hidden lines
+ );+ const buildMcpClient = async (server: AgentJsonMcpServerConfig) => await buildMcpClientForServer(server, { credentialProvider,The agent runtime creates the web-search transport with the configured SSRF service.
Fixpackages/cli/src/modules/agents/json-config/from-json-config.tssource n8n-io/n8n@ca3d42d838+8−0
@@ -353,3 +354,11 @@+ args.query,+ {+ maxResults: args.maxResults,+ includeDomains: args.includeDomains,+ excludeDomains: args.excludeDomains,+ },+ webSearchFetch,+ ); }, };Show 1 hidden lines
}The fallback caller passes the configured web-search transport into the SearXNG request helper.
Patch fingerprints
AI-assisted change 9f3c51c6e6948d0f4583deec5385f74e819bd13d1eaf2092c749f4273e592043 · Fix 4349b9b8391af06634553b67b159d1a3bb71786289f901667105736d28893976