CVE-2026-103254

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.80 n8n versions 2.0.0 through 2.39.5 n8n versions 2.40.0

Description A path traversal issue exists in the signed resume URL generation for Send-and-Wait approvals. Users with workflow creation permissions can forge approval URLs for gates in projects they are not authorized to access. This is achieved by exploiting unresolved traversal sequences within caller-controlled node IDs, allowing for cross-project approval forgery.

Recommendations Update n8n to version 1.123.80 or later. Update n8n to version 2.39.6 or later. Update n8n to version 2.40.1 or later.