[ CVE-2026-110841 · Published 14 Oct 2026 ]
Vulnerability in n8n-io n8n
CVSS 6.1
EPSS <1%1 agency advisoryNo fix listed yet
[ Description ]Official description
n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying that the suspended checkpoint belongs to the caller. Authenticated project members can list and read other members' private agent conversations through project-scoped endpoints, then approve their pending tool calls, causing the tools to execute and write results into the victim's conversation.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.
[ Advisories ]Government CERT advisories
-
BSI CERT-BundWID-SEC-2026-3672
n8n: Multiple vulnerabilities Translated from German