Customer operations

Request automation

City Mutual routes branch contact forms through n8n 2.9.0 (CVE-2026-27493 / CVE-2026-27577). The workflow is a public multi-step form that echoes your name back on the confirmation page.

Contact form

Unauthenticated form trigger on the main bank host. Expression evaluation is enabled in the confirmation step.

Open contact form

Workflow editor

n8n editor is mounted at /automation/ on citymutual.co.in.

Open n8n

Lab only. Do not expose this stack on a public network. See README for the CVE PoC.

Back to support