Skip to content
OpenAdvisories

Package · npm

n8n

156 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-42228 Public exploit

    n8n: Hijacking of Unauthenticated Chat Execution

    n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the /chat WebSocket endpoint used by the Chat Trigger node's Hosted Chat feature did not verify that an incoming connection was authorized to interact with the…