CVE-2026-110841 — n8n before 2.41.4 and 2.42.0 Authorization Bypass in Agent Chat Resume Tool Approval
n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying that the …
Published: 2026-10-14 · CVSS: 6.1 · CVSS 4.0
n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying that the suspended checkpoint belongs to the caller. Authenticated project members can list and read other members' private agent conversations through project-scoped endpoints, then approve their pending tool calls, causing the tools to execute and write results into the victim's conversation.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7