n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket
- Product
- n8n
- CVE
- CVE-2026-86077
- Affected
- n8n < 2.37.7 and >= 2.38.0, < 2.38.2
- Fixed in
- 2.37.7
Last verified against sources: October 26, 2026
Am I affected?
n8n: affected n8n < 2.37.7 and >= 2.38.0, < 2.38.2. Fixed in 2.37.7.
- Check your version: run
npm ls n8n. Versions >= 2.38.0, < 2.38.2 of n8n are affected. [1]
What to do now
- Upgrade to the fixed version: run
npm install n8n@2.38.2(first patched version 2.38.2). [1] - Users should upgrade to one of these versions or later to remediate the vulnerability. [1]
- If upgrading is not immediately possible, administrators should consider restricting n8n instance access to fully trusted users only. [1]
- Avoid workflows that combine a Form Trigger with non-chat approval gates (Send-and-Wait, Telegram/Slack/Gmail HITL, or plain Wait nodes) on publicly accessible instances. [1]
- Audit recent executions of such workflows for unexpected completion without a corresponding approval callback. [1]
General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.
What happened
Impact
- A party with no account could present the token on the chat route and release an execution waiting at an approval gate, the control an author puts in front of an action considered too consequential to automate. [1]
What was done
Sources
- GHSA-35jj-42hp-8gmq — GitHub Advisory Database
Every statement above was checked against these sources before publishing. Spotted an error? Tell us and we will correct it with a dated note.
Share advisory brief with your team
Copy a plain-text summary for Slack, GitHub issues, or team security channels.
[CVE-2026-86077] n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket
Product: n8n | Affected: n8n < 2.37.7 and >= 2.38.0, < 2.38.2 | Fixed in: 2.37.7
Summary: The /chat WebSocket route resumed a paused execution from a resume token without checking that the node being resumed was a chat node.
Source & remediation on AgentArmorHQ: https://agentarmorhq.com/incidents/2026/09/cve-2026-86077-n8nCorrections
Report an error or request a correction. We review requests within 5 business days and add a dated correction note.
Discussions for CVE-2026-86077
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.