CVE-2026-118640
MEDIUM
NVD
CVSS Score
5.4
Severity
MEDIUM
Published
Oct 28, 2026
Vendor
unknown
Description
n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability in Chat Hub that allows chat-only users to register restricted tool types. Users with the global:chatUser role can add and run tools through chat to execute sandboxed code, access permitted files, and use instance workflows, Data Tables, and agents.