CVE-2026-110841
Last modified
CVE-2026-110841 is a medium-severity vulnerability rated 6.1/10 on the CVSS scale. n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying that the suspended checkpoint belongs to the caller. Authenticated project members can list and read other members' private agent conversations through project-scoped endpoints, then approve their pending tool calls, causing the tools to execute and write results into the victim's conversation..
Description
n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying that the suspended checkpoint belongs to the caller. Authenticated project members can list and read other members' private agent conversations through project-scoped endpoints, then approve their pending tool calls, causing the tools to execute and write results into the victim's conversation.
Metrics
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-110841?
How severe is CVE-2026-110841?
How do I fix CVE-2026-110841?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-110836FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop v…6.5
- CVE-2026-110837FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON an…7.1
- CVE-2026-110838FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches in…7.5
- CVE-2026-110839FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMA…7.1
- CVE-2026-11084Inappropriate implementation in Password Manager in Google C…6.5
- CVE-2026-110840n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL i…7
- CVE-2026-110842n8n before 2.41.4 and 2.42.x before 2.42.1 contains a protot…7.7
- CVE-2026-110843n8n before 2.41.4 and 2.42.x before 2.42.1 contains an uncon…8.2
- CVE-2026-110844n8n before 1.123.83 contains an authorization bypass vulnera…7.2
- CVE-2026-110845n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.…7.7
- CVE-2026-110846n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signat…7
- CVE-2026-110847n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.…7
Are you affected by CVE-2026-110841?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST