CVE-2026-103260: n8n before 2.39.6 and 2.40.x before 2.40.1 Approval Bypass via Send and Wait Node

Q: Which workflows are exposed to this issue?

Workflows that use the Send and Wait node in Approve Within Chat mode are exposed. The vulnerability affects n8n versions before 2.39.6, as well as version 2.40.0 before 2.40.1.

Q: Does an attacker need an n8n account or approval privileges?

No. An unauthenticated attacker can submit resume requests because the affected mode does not verify the requester's identity or approval permissions.

Q: What is the practical impact of a successful exploit?

An attacker can advance a waiting workflow execution and cause actions intended to be guarded by an approval step to run. The available information identifies integrity impact, not confidentiality or availability impact.

Q: What should be prioritized if immediate remediation is not possible?

Prioritize workflows using Send and Wait with Approve Within Chat, especially where advancing the workflow triggers sensitive or consequential actions. The provided information does not specify a workaround beyond updating to a fixed version.

Published Oct 1, 2026

Updated

n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain an approval bypass vulnerability in the Send and Wait node's Approve Within Chat mode. Attackers can submit resume requests without verification of the requester's identity or approval permissions, allowing unauthenticated users to advance waiting executions and trigger guarded actions.

Affected Software

1 affected component

n8n n8n<2.39.6, >=2.40.0<2.40.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade n8n to a version that resolves this vulnerability.
Fixed in 2.39.6
Upgrade
Upgrade n8n to a version that resolves this vulnerability.
Fixed in 2.40.1

Event History

Oct 1, 2026

CVE Published

via MITRE·10:42 AM

Data Sourced

via MITRE·10:42 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·11:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which workflows are exposed to this issue?

Workflows that use the Send and Wait node in Approve Within Chat mode are exposed. The vulnerability affects n8n versions before 2.39.6, as well as version 2.40.0 before 2.40.1.

Does an attacker need an n8n account or approval privileges?

No. An unauthenticated attacker can submit resume requests because the affected mode does not verify the requester's identity or approval permissions.

What is the practical impact of a successful exploit?

An attacker can advance a waiting workflow execution and cause actions intended to be guarded by an approval step to run. The available information identifies integrity impact, not confidentiality or availability impact.

What should be prioritized if immediate remediation is not possible?

Prioritize workflows using Send and Wait with Approve Within Chat, especially where advancing the workflow triggers sensitive or consequential actions. The provided information does not specify a workaround beyond updating to a fixed version.

CVE-2026-103260: n8n before 2.39.6 and 2.40.x before 2.40.1 Approval Bypass via Send and Wait Node

Affected Software

Remediation

Event History

Frequently Asked Questions

Which workflows are exposed to this issue?

Does an attacker need an n8n account or approval privileges?

What is the practical impact of a successful exploit?

What should be prioritized if immediate remediation is not possible?

Company

Resources

Contact

Frequently Asked Questions

Which workflows are exposed to this issue?

Does an attacker need an n8n account or approval privileges?

What is the practical impact of a successful exploit?

What should be prioritized if immediate remediation is not possible?