p PatchFirst

CVE-2026-118640

CVE-2026-118640 · n8n before 1.123.85, 2.43.5, and 2.44.1 Chat Hub Authorization Bypass

This page contains facts from public vulnerability sources. Check the original advisory before updating.

n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability in Chat Hub that allows chat-only users to register restricted tool types. Users with the global:chatUser role can add and run tools through chat to execute sandboxed code, access permitted files, and use instance workflows, Data Tables, and agents.

CVSS 5.3 · Medium · EPSS 0.2% · Fix available

Published
Updated

Affected products and versions

  • n8n

    Versions
    • ≥ 0, < 1.123.85: Affected (semver)
    • 1.123.85: Not affected (semver)

    Update to 1.123.85

  • n8n

    Versions
    • ≥ 2.44.0, < 2.44.1: Affected (semver)
    • 2.44.1: Not affected (semver)

    Update to 2.44.1

  • n8n

    Versions
    • ≥ 2.0.0, < 2.43.5: Affected (semver)
    • 2.43.5: Not affected (semver)

    Update to 2.43.5

Original sources

Check your server →