CVE-2026-86077: n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket
n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /chat WebSocket route accepted a resumeToken and resumed a paused execution without checking that the target node supported chat messages. An anonymous form submitter who received that token could reuse it on the chat route to release a Send-and-Wait, non-chat HITL, or Wait approval gate. The affected authorization logic is packages/cli/src/chat/chat-execution-manager.ts, where canResumeOverChat did not gate the resume target. This issue is fixed in versions 2.37.7 and 2.38.2.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
n8nto a version that resolves this vulnerability.Fixed in 2.37.7 - Upgrade
Upgrade
n8nto a version that resolves this vulnerability.Fixed in 2.38.2
Event History
Frequently Asked Questions
Who can exploit this issue?
An anonymous form submitter who has received a resumeToken can reuse that token through the /chat WebSocket route. The token can then be used to release a paused Send-and-Wait, non-chat human-in-the-loop, or Wait approval gate.
Which deployments are affected?
n8n versions before 2.37.7 and 2.38.2 are affected. The issue is in the authorization logic for the /chat WebSocket route when resuming executions.
What should be done if an immediate upgrade is not possible?
The provided information does not specify a workaround. Prioritize preventing anonymous users from receiving resumeTokens and upgrade to 2.37.7 or 2.38.2 when possible.