{"id":"CVE-2026-86077","title":"n8n is an open source workflow automation platform","summary":"n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /chat WebSocket route accepted a resumeToken and resumed a paused execution without checking that the target node supported chat messages. An anonymous f…","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-862"],"vendor":"n8n","product":"n8n","affected":["n8n < 2.37.7","n8n >= 2.38.0, < 2.38.2"],"patched":["n8n 2.38.2"],"published":"2026-09-08","updated":"2026-09-14","sourceUpdated":"2026-09-14T13:18:57.347","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86077","references":[{"url":"https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","label":"security-advisories@github.com"},{"url":"https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2","label":"security-advisories@github.com"},{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-35jj-42hp-8gmq","label":"security-advisories@github.com"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86077"},{"url":"https://github.com/advisories/GHSA-35jj-42hp-8gmq"}],"tags":["nvd","cve.org","ghsa","npm"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-09-14T12:04:54.684621Z"},"scores":{"nvd":6.5,"cna":6.3},"epss":0.00251,"epssPercentile":0.16869,"aliases":["GHSA-35jj-42hp-8gmq"],"ecosystem":"npm","ingestedAt":"2026-09-08T22:12:31.038Z","slug":"CVE-2026-86077","body":"## Overview\n\nn8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /chat WebSocket route accepted a resumeToken and resumed a paused execution without checking that the target node supported chat messages. An anonymous form submitter who received that token could reuse it on the chat route to release a Send-and-Wait, non-chat HITL, or Wait approval gate. The affected authorization logic is packages/cli/src/chat/chat-execution-manager.ts, where canResumeOverChat did not gate the resume target. This issue is fixed in versions 2.37.7 and 2.38.2.\n\n## Affected\n\n- `n8n < 2.37.7`\n- `n8n >= 2.38.0, < 2.38.2`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `n8n 2.38.2`\n\n## Package advisory (CVE-2026-86077)\n\nAffected packages:\n\n- `n8n >= 2.38.0, < 2.38.2`\n- `n8n < 2.37.7`\n\nPatched in:\n\n- `n8n 2.38.2`\n- `n8n 2.37.7`\n\nSource: https://github.com/advisories/GHSA-35jj-42hp-8gmq","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":202067,"id":"CVE-2026-86077","ts":1789400047480,"field":"cvss","old":"6.3","new":"6.5"},{"seq":200794,"id":"CVE-2026-86077","ts":1789397615766,"field":"cvss","old":"6.5","new":"6.3"},{"seq":199487,"id":"CVE-2026-86077","ts":1789395520647,"field":"cvss","old":"6.3","new":"6.5"},{"seq":198732,"id":"CVE-2026-86077","ts":1789392243370,"field":"cvss","old":"6.5","new":"6.3"},{"seq":197065,"id":"CVE-2026-86077","ts":1789384291777,"field":"cvss","old":"6.3","new":"6.5"},{"seq":194194,"id":"CVE-2026-86077","ts":1789378782433,"field":"cvss","old":"6.5","new":"6.3"},{"seq":192981,"id":"CVE-2026-86077","ts":1789376514418,"field":"cvss","old":"6.3","new":"6.5"},{"seq":191768,"id":"CVE-2026-86077","ts":1789373630445,"field":"cvss","old":"6.5","new":"6.3"},{"seq":190553,"id":"CVE-2026-86077","ts":1789369474666,"field":"cvss","old":"6.3","new":"6.5"},{"seq":189340,"id":"CVE-2026-86077","ts":1789368408354,"field":"cvss","old":"6.5","new":"6.3"},{"seq":188123,"id":"CVE-2026-86077","ts":1789365230078,"field":"cvss","old":"6.3","new":"6.5"},{"seq":186910,"id":"CVE-2026-86077","ts":1789363470638,"field":"cvss","old":"6.5","new":"6.3"},{"seq":185696,"id":"CVE-2026-86077","ts":1789361228414,"field":"cvss","old":"6.3","new":"6.5"},{"seq":184483,"id":"CVE-2026-86077","ts":1789358363024,"field":"cvss","old":"6.5","new":"6.3"},{"seq":182734,"id":"CVE-2026-86077","ts":1789354316442,"field":"cvss","old":"6.3","new":"6.5"},{"seq":181527,"id":"CVE-2026-86077","ts":1789353317047,"field":"cvss","old":"6.5","new":"6.3"},{"seq":180320,"id":"CVE-2026-86077","ts":1789350284067,"field":"cvss","old":"6.3","new":"6.5"},{"seq":179113,"id":"CVE-2026-86077","ts":1789348292213,"field":"cvss","old":"6.5","new":"6.3"},{"seq":177906,"id":"CVE-2026-86077","ts":1789346369364,"field":"cvss","old":"6.3","new":"6.5"},{"seq":176699,"id":"CVE-2026-86077","ts":1789343183868,"field":"cvss","old":"6.5","new":"6.3"},{"seq":174816,"id":"CVE-2026-86077","ts":1789334874997,"field":"cvss","old":"6.3","new":"6.5"},{"seq":173611,"id":"CVE-2026-86077","ts":1789333686174,"field":"cvss","old":"6.5","new":"6.3"},{"seq":172425,"id":"CVE-2026-86077","ts":1789331092353,"field":"cvss","old":"6.3","new":"6.5"},{"seq":171239,"id":"CVE-2026-86077","ts":1789328780235,"field":"cvss","old":"6.5","new":"6.3"},{"seq":170034,"id":"CVE-2026-86077","ts":1789327196501,"field":"cvss","old":"6.3","new":"6.5"},{"seq":168829,"id":"CVE-2026-86077","ts":1789323839398,"field":"cvss","old":"6.5","new":"6.3"},{"seq":167624,"id":"CVE-2026-86077","ts":1789319701783,"field":"cvss","old":"6.3","new":"6.5"},{"seq":166419,"id":"CVE-2026-86077","ts":1789318775477,"field":"cvss","old":"6.5","new":"6.3"},{"seq":165214,"id":"CVE-2026-86077","ts":1789315789294,"field":"cvss","old":"6.3","new":"6.5"},{"seq":164009,"id":"CVE-2026-86077","ts":1789313633630,"field":"cvss","old":"6.5","new":"6.3"},{"seq":162804,"id":"CVE-2026-86077","ts":1789311902752,"field":"cvss","old":"6.3","new":"6.5"},{"seq":161599,"id":"CVE-2026-86077","ts":1789308732573,"field":"cvss","old":"6.5","new":"6.3"},{"seq":159712,"id":"CVE-2026-86077","ts":1789300469944,"field":"cvss","old":"6.3","new":"6.5"},{"seq":156701,"id":"CVE-2026-86077","ts":1789294754993,"field":"cvss","old":"6.5","new":"6.3"},{"seq":155496,"id":"CVE-2026-86077","ts":1789292967275,"field":"cvss","old":"6.3","new":"6.5"},{"seq":154291,"id":"CVE-2026-86077","ts":1789289796913,"field":"cvss","old":"6.5","new":"6.3"},{"seq":151542,"id":"CVE-2026-86077","ts":1789277629207,"field":"cvss","old":"6.3","new":"6.5"},{"seq":150503,"id":"CVE-2026-86077","ts":1789276245013,"field":"cvss","old":"6.5","new":"6.3"},{"seq":149470,"id":"CVE-2026-86077","ts":1789273824061,"field":"cvss","old":"6.3","new":"6.5"},{"seq":148437,"id":"CVE-2026-86077","ts":1789271348099,"field":"cvss","old":"6.5","new":"6.3"},{"seq":146468,"id":"CVE-2026-86077","ts":1789269393948,"field":"cvss","old":"6.3","new":"6.5"},{"seq":145273,"id":"CVE-2026-86077","ts":1789266338936,"field":"cvss","old":"6.5","new":"6.3"},{"seq":144177,"id":"CVE-2026-86077","ts":1789262616106,"field":"cvss","old":"6.3","new":"6.5"},{"seq":143081,"id":"CVE-2026-86077","ts":1789261532792,"field":"cvss","old":"6.5","new":"6.3"},{"seq":141912,"id":"CVE-2026-86077","ts":1789258831123,"field":"cvss","old":"6.3","new":"6.5"},{"seq":140753,"id":"CVE-2026-86077","ts":1789256726516,"field":"cvss","old":"6.5","new":"6.3"},{"seq":139555,"id":"CVE-2026-86077","ts":1789254831402,"field":"cvss","old":"6.3","new":"6.5"},{"seq":138357,"id":"CVE-2026-86077","ts":1789251933598,"field":"cvss","old":"6.5","new":"6.3"},{"seq":137159,"id":"CVE-2026-86077","ts":1789247832086,"field":"cvss","old":"6.3","new":"6.5"},{"seq":135961,"id":"CVE-2026-86077","ts":1789247055352,"field":"cvss","old":"6.5","new":"6.3"}]}