CVE-2026-86077

Analyzed Analyzed - Analysis Complete

Chat Route Resume Token Authorization Bypass in n8n

Publication date: 2026-09-08

Last updated on: 2026-09-14

Assigner: GitHub, Inc.

Description

n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /chat WebSocket route accepted a resumeToken and resumed a paused execution without checking that the target node supported chat messages. An anonymous form submitter who received that token could reuse it on the chat route to release a Send-and-Wait, non-chat HITL, or Wait approval gate. The affected authorization logic is packages/cli/src/chat/chat-execution-manager.ts, where canResumeOverChat did not gate the resume target. This issue is fixed in versions 2.37.7 and 2.38.2.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-14

Generated

2026-09-29

AI Q&A

2026-09-09

EPSS Evaluated

2026-09-27

NVD

CVE-2026-86077

EUVD

EUVD-2026-74279

Affected Vendors & Products

Vendor	Product	Version / Range
n8n	n8n	to 2.37.7 (exc)
n8n	n8n	From 2.38.0 (inc) to 2.38.2 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

n8n is a workflow automation platform. This vulnerability allows an attacker to resume a paused workflow execution by reusing a token without verifying if the target node supports chat messages. The flaw is in the authorization logic in packages/cli/src/chat/chat-execution-manager.ts, where the resume function did not check the target node type.

Impact Analysis

An attacker could exploit this to bypass approval gates or release paused workflows, potentially leading to unauthorized actions or data exposure. This could disrupt automated processes or allow unintended workflow execution.

Compliance Impact

This vulnerability could lead to unauthorized data processing or access, violating GDPR's integrity and confidentiality principles or HIPAA's access control requirements. Organizations using affected n8n versions may face compliance risks.

Mitigation Strategies

Upgrade n8n to version 2.37.7 or 2.38.2 or later to address the vulnerability in the /chat WebSocket route.

Hi! I’m here to help you understand CVE-2026-86077. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70