CVE-2026-110846

Deferred Deferred - Pending Action

Signature Bypass in n8n Workflow Execution

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: VulnCheck

Description

n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint, which selects Send-and-Wait validation before normalising an alternate node reference form. Attackers holding an execution's resume token can approve waiting executions meant for others, running downstream actions under the workflow owner's credentials, potentially including command execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-110846

EUVD

EUVD-2026-101729

Affected Vendors & Products

Vendor	Product	Version / Range
n8n-io	n8n	0
n8n-io	n8n	2.42.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-180	The product validates input before it is canonicalized, which prevents the product from detecting data that becomes invalid after the canonicalization step.

Attack-Flow Graph

Executive Summary

n8n versions before 2.41.4 and 2.42.x before 2.42.1 have a signature bypass in the waiting-webhook endpoint. This flaw allows attackers with an execution's resume token to approve waiting executions intended for others. The attacker can then run downstream actions using the workflow owner's credentials, which may include command execution.

Detection Guidance

This vulnerability involves a signature bypass in n8n's waiting-webhook endpoint. To detect it, check for unauthorized approvals of waiting executions by reviewing execution logs and resume tokens. Monitor for unexpected workflow activations under workflow owner credentials. No specific commands are provided in the context.

Impact Analysis

An attacker could gain unauthorized access to execute commands or actions on your behalf. This could lead to data breaches, unauthorized system changes, or further compromise of your environment if the workflow has elevated permissions.

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, violating GDPR's data protection principles or HIPAA's security requirements. Organizations may face compliance violations, fines, or reputational damage if exploited.

Mitigation Strategies

Upgrade n8n to version 2.41.4 or later if using the 2.41.x branch, or to version 2.42.1 or later if using the 2.42.x branch to address the signature bypass in the waiting-webhook endpoint.

Hi! I’m here to help you understand CVE-2026-110846. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70