CVE-2026-126389 · AI agents & MCP
NO FIX YET · SEE WHAT TO DO
n8n before 1.123.89 has an authentication bypass in the Chat Trigger node: the setup GET webhook route in embedded chat mode skips n8n User Auth. An unauthenticated attacker can read named chat session conversation history or trigger workflows with attacker-supplied input.
first public Oct 28, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Self-hosted n8n instances before 1.123.89 that run a workflow with a Chat Trigger node in embedded chat mode are exposed, since the bypass is on the chat webhook's setup GET route. Instances with no Chat Trigger workflows, or that are already on 1.123.89 or later, are not affected by this issue.
Not affected if already-patched, managed-hosting, no-chat-trigger
Who cares chat-trigger, n8n, self-hosted, workflow-automation
n8n --version or the instance's About page; versions below 1.123.89 are in range.1.123.89 or later.n8n before 1.123.89 contains an authentication bypass vulnerability in the Chat Trigger that allows unauthenticated attackers to skip n8n User Auth through the setup GET webhook route in embedded chat mode. Attackers can send unauthenticated GET requests to the chat webhook URL to read named session conversation history or trigger workflows with attacker-supplied input.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.