---
id: "CVE-2026-126389"
page: "https://infrastack.ai/live/CVE-2026-126389"
kind: "vulnerability"
aliases: ["CVE-2026-126389"]
title: "n8n: Chat Trigger auth bypass exposes session history and workflow triggers"
severity: "medium"
cvss: 6.3
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-tooling", "chat-trigger", "n8n", "self-hosted", "workflow-automation"]
not_affected_if: ["already-patched", "managed-hosting", "no-chat-trigger"]
published_at: "2026-11-13T10:17:42+00:00"
first_seen_at: "2026-11-13T10:47:18+00:00"
updated_at: "2026-11-13T10:55:21+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-126389", "first_seen_at": "2026-11-13T10:47:18+00:00"}]
exploit_sources: []
---

# n8n: Chat Trigger auth bypass exposes session history and workflow triggers

Link for people: https://infrastack.ai/live/CVE-2026-126389 (this .md is for agents)

n8n before 1.123.89 has an authentication bypass in the Chat Trigger node: the setup GET webhook route in embedded chat mode skips n8n User Auth. An unauthenticated attacker can read named chat session conversation history or trigger workflows with attacker-supplied input.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the n8n version with `n8n --version` or the instance's About page; versions below `1.123.89` are in range.
- Look for workflows that use the Chat Trigger node in embedded chat mode.

## Fix

- n8n: upgrade to `1.123.89` or later.

## Timeline

- 2026-11-13T10:47:18+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-126389

## Documents

- [advisory] Maintainer's advisory: github.com https://github.com/n8n-io/n8n/security/advisories/GHSA-pwj5-wwm6-g83j
- [advisory] Third-party advisory: www.vulncheck.com https://www.vulncheck.com/advisories/n8n-before-1.123.89-authentication-bypass-via-chat-trigger-embedded-chat

## From the sources

n8n before 1.123.89 contains an authentication bypass vulnerability in the Chat Trigger that allows unauthenticated attackers to skip n8n User Auth through the setup GET webhook route in embedded chat mode. Attackers can send unauthenticated GET requests to the chat webhook URL to read named session conversation history or trigger workflows with attacker-supplied input.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_