{"data":{"id":"92a02067-5904-4039-b9bf-74d25a3c5b48","title":"GHSA-3c7f-5hgj-h279: n8n has XSS in Chat Trigger Node through Custom CSS","summary":"An authenticated user with permission to create or modify workflows can inject JavaScript into the Custom CSS field of the n8n Chat Trigger node. A misconfiguration in the sanitize-html library lets the sanitization be bypassed, producing stored XSS on the public chat page that affects any user who visits the chat URL.","solution":"Fixed in n8n versions 1.123.27, 2.13.3, and 2.14.1; upgrade to one of these versions or later. If upgrading is not immediately possible, limit workflow creation and editing permissions to fully trusted users only, and disable the Chat Trigger node by adding @n8n/n8n-nodes-langchain.chatTrigger to the NODES_EXCLUDE environment variable. The source states these workarounds do not fully remediate the risk and should only be used as short-term measures.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-3c7f-5hgj-h279","publishedAt":"2026-03-27T18:06:49.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["n8n@>= 2.0.0-rc.0, < 2.13.3 (fixed: 2.13.3)","n8n@= 2.14.0 (fixed: 2..14.1)","n8n@< 1.123.27 (fixed: 1.123.27)"],"affectedPackageNames":["n8n"],"affectedPackageRefs":["npm:n8n"],"affectedVendors":[],"affectedVendorsRaw":["n8n","Chat Trigger Node","LangChain Chat Trigger node (@n8n/n8n-nodes-langchain.chatTrigger)"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-3c7f-5hgj-h279"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-03-27T18:06:49.000Z","fixReleasedAt":"2026-03-25T11:40:17.687Z","daysToFix":-2,"fixCheckedAt":"2026-10-29T21:39:23.721Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity","confidentiality"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.75,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"n8n","fixedVersion":"2.13.3","matchedVersion":"2.13.3","fixReleasedAt":"2026-03-25T11:40:17.687Z","daysToFix":-2,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:39:23.576Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"2..14.1","matchedVersion":null,"fixReleasedAt":null,"daysToFix":null,"match":"ecosystem","source":"tracked","status":"version_not_found","checkedAt":"2026-10-29T21:39:23.576Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"1.123.27","matchedVersion":"1.123.27","fixReleasedAt":"2026-03-25T13:09:03.528Z","daysToFix":-2,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:39:23.576Z"}]}}