GHSA-3c7f-5hgj-h279: n8n has XSS in Chat Trigger Node through Custom CSS

Summary

An authenticated user with permission to create or modify workflows can inject JavaScript into the Custom CSS field of the n8n Chat Trigger node. A misconfiguration in the sanitize-html library lets the sanitization be bypassed, producing stored XSS on the public chat page that affects any user who visits the chat URL.

Mitigation

Fixed in n8n versions 1.123.27, 2.13.3, and 2.14.1; upgrade to one of these versions or later. If upgrading is not immediately possible, limit workflow creation and editing permissions to fully trusted users only, and disable the Chat Trigger node by adding @n8n/n8n-nodes-langchain.chatTrigger to the NODES_EXCLUDE environment variable. The source states these workarounds do not fully remediate the risk and should only be used as short-term measures.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• n8nnpmLLM dependency since 2026-02-10

Related items

• HighCVE-2026-123818: LMDeploy is a toolkit for compressing, deploying, and serving large language models. From 0.12.3 until 0.15.0…Similar attack · NVD/CVE Database
• HighGHSA-vvr2-h2jp-838m: Code Graph RAG: MCP paginated read_file path traversal / arbitrary file readSimilar attack · GitHub Advisory Database
• MediumAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxSimilar attack · Dark Reading
• MediumCVE-2026-124588: huggingface finetrainers code injection via Library argumentSimilar attack · NVD/CVE Database
• MediumTaiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch RecordsSimilar attack · The Hacker News