Live › vulnerability › CVE-2026-118640
Go to dashboardn8n Chat Hub lets users with the global:chatUser role register restricted tool types they should not have access to. An attacker with a chat-only account can run sandboxed code, reach permitted files, and use instance workflows, Data Tables, and agents.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 19:34 UTC. All times on this page are UTC.
Self-hosted n8n instances that have Chat Hub in use and accounts with the global:chatUser role, since those accounts are the ones that can register restricted tools. Instances with no chat-only users have little exposure, but the sources do not say how common Chat Hub use is. Teams on the patched versions can skip it.
No product ranges from the sources yet.
n8n --version (or check the image tag) and compare against 1.123.85, 2.43.5 and 2.44.1global:chatUser role in the n8n admin settings and confirm whether chat-only accounts exist1.123.85 on the 1.x line, 2.43.5 on the 2.43 line, or 2.44.1 on the 2.44 lineglobal:chatUser role from untrusted accountsEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability in Chat Hub that allows chat-only users to register restricted tool types. Users with the global:chatUser role can add and run tools through chat to execute sandboxed code, access permitted files, and use instance workflows, Data Tables, and agents.
This page as .md · .json · in your agent: get_signal("CVE-2026-118640")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.