CVE-2026-110841 n8n-io CVE debrief

Who should care

Defenders responsible for n8n deployments, particularly those using versions before 2.41.4 or 2.42.0, should assess exposure and prioritize upgrading to a secure version. Project members with access to agent conversations may also need to review their interaction with the chat resume tool.

Why it matters

CVE-2026-110841 is a medium-severity authorization bypass vulnerability in n8n's agent chat resume tool approval. Defenders should prioritize verifying and upgrading n8n versions, assessing exposure, and monitoring for suspicious activity. The vulnerability allows authenticated project members to list, read, and approve pending tool calls from other members' private agent conversations, potentially leading to unauthorized tool execution and result writing. Evidence is limited, and further verification is needed to determine the full impact and remediation steps.

• Potential unauthorized tool execution in victim conversations
• Possible reading of private agent conversations by unauthorized members
• Need for verification of n8n version and exposure in environments
• Priority on upgrading to a secure n8n version to prevent exploitation

Technical summary

The vulnerability exists in the agent chat resume endpoint of n8n before versions 2.41.4 and 2.42.0. An authenticated project member can bypass authorization to list and read other members' private agent conversations, then approve pending tool calls. This could lead to tools executing and writing results into the victim's conversation. Affected product deployments should be identified in managed environments, and owners assigned for follow-up. Official advisories and CVE records should be reviewed to validate affected scope, severity, and vendor guidance.

Defensive priority

Defenders should prioritize verifying and upgrading to a secure version of n8n, assessing exposure in their environments, and monitoring for suspicious activity related to agent chat resume tool approval.

Recommended defensive actions

• Verify n8n version and upgrade to 2.41.4 or later if necessary
• Assess exposure in environments using affected n8n versions
• Monitor for suspicious activity related to agent chat resume tool approval
• Review and restrict project-scoped endpoints for agent conversations
• Perform asset inventory of n8n deployments
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Track exceptions and retest remediated assets

Evidence notes

The CVE record and source item provide details on the vulnerability, affected versions, and references to vendor advisories. However, there is limited information on exploitation, impact, or remediation beyond version upgrades.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.