{"data":{"id":"af4233d5-c108-4aea-b9d1-5f9dada74fd2","title":"GHSA-f77h-j2v7-g6mw: n8n Vulnerable to Hijacking of Unauthenticated Chat Execution ","summary":"The `/chat` WebSocket endpoint used by n8n's Chat Trigger node did not verify that incoming connections were authorized for the target execution. An unauthenticated remote attacker who could identify a valid execution ID for a workflow in a waiting state could attach to that execution, receive the pending prompt meant for the legitimate user, and submit arbitrary input to resume or influence downstream workflow behavior. Exploitation requires a public Hosted Chat workflow with authentication set to `None`, a target execution in a waiting state, and knowledge of that execution ID.","solution":"Fixed in n8n versions 1.123.32, 2.17.4, and 2.18.1; upgrade to one of these or later. Temporary workaround if upgrading is not immediately possible: set the Authentication field on all Chat Trigger nodes to `n8n User Auth` rather than `None`. The source states this workaround does not fully remediate the risk and should only be used as a short-term measure.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-f77h-j2v7-g6mw","publishedAt":"2026-04-29T21:17:44.000Z","cveId":"CVE-2026-42228","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["n8n@>= 2.0.0, < 2.17.4 (fixed: 2.17.4)","n8n@>= 2.18.0, < 2.18.1 (fixed: 2.18.1)","n8n@< 1.123.32 (fixed: 1.123.32)"],"affectedPackageNames":["n8n"],"affectedPackageRefs":["npm:n8n"],"affectedVendors":[],"affectedVendorsRaw":["n8n","n8n Chat Trigger node","n8n Hosted Chat"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00383,"epssCheckedAt":"2026-11-10T00:11:22.330Z","kevDateAdded":null,"advisoryAliases":["GHSA-f77h-j2v7-g6mw"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-04-29T21:17:44.000Z","fixReleasedAt":"2026-04-22T06:25:44.105Z","daysToFix":-7,"fixCheckedAt":"2026-10-29T21:37:14.075Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"n8n","fixedVersion":"2.18.1","matchedVersion":"2.18.1","fixReleasedAt":"2026-04-22T06:58:17.570Z","daysToFix":-7,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:37:13.922Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"1.123.32","matchedVersion":"1.123.32","fixReleasedAt":"2026-04-22T06:25:44.105Z","daysToFix":-7,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:37:13.922Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"2.17.4","matchedVersion":"2.17.4","fixReleasedAt":"2026-04-22T07:16:24.418Z","daysToFix":-7,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:37:13.922Z"}]}}