{"data":{"id":"c335428c-056c-4a93-a729-bd6ba3b57167","title":"GHSA-35jj-42hp-8gmq: n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket","summary":"A security flaw in n8n (a workflow automation tool) allowed anyone without an account to bypass approval gates (checkpoints that require human approval before executing important actions) by reusing a special token called a resumeToken on the chat route. The issue occurred because the system didn't verify that the token was being used for the correct type of node, allowing unauthorized users to complete workflows that should have required approval.","solution":"The issue has been fixed in n8n versions 2.37.7 and 2.38.2. Users should upgrade to one of these versions or later to remediate the vulnerability. If upgrading is not immediately possible, administrators should: (1) restrict n8n instance access to fully trusted users only, (2) avoid workflows that combine a Form Trigger with non-chat approval gates (Send-and-Wait, Telegram/Slack/Gmail HITL, or plain Wait nodes) on publicly accessible instances, and (3) audit recent executions of such workflows for unexpected completion without a corresponding approval callback. These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-35jj-42hp-8gmq","publishedAt":"2026-09-10T20:37:00.000Z","cveId":"CVE-2026-86077","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["jailbreak"],"issueType":"vulnerability","affectedPackages":["n8n@< 2.37.7 (fixed: 2.37.7)","n8n@>= 2.38.0, < 2.38.2 (fixed: 2.38.2)"],"affectedVendors":[],"affectedVendorsRaw":["n8n"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00361,"patchAvailable":true,"disclosureDate":"2026-09-10T20:37:00.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0054"]}}