Description

Detects when an HTTP Request node in the published version of an n8n workflow, or its tool variant, has Ignore SSL Issues (Insecure) turned on, so it accepts any TLS certificate the server presents. Anyone able to intercept the node's traffic can then impersonate the server and read or alter what the workflow sends and receives, including the credentials the node attaches to each request.

Detection Strategy

• Lists every workflow the API key's user can see through the n8n public API, all of them for an owner or admin key, and reads only the version of each one that is published, so a draft change or a workflow that was never published is not assessed

• Skips disabled nodes and reads the HTTP Request node together with its two tool variants, httpRequestTool and httpRequestHitlTool

• Reads the Ignore SSL Issues (Insecure) setting where each version of the node stores it: at the top of its parameters in versions 1 and 2, and under its options from version 3 onward

• Reports a vulnerability when that setting holds any value n8n reads as true, an expression included; a workflow whose listing omits the published version field, or whose published version has no node list, is recorded as unreadable rather than reported as clean