PT-2026-103793 · N8N · N8N
CVSS v4.0
6.3
متوسطة
| المتجه | AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N |
Name of the Vulnerable Software and Affected Versions
n8n versions prior to 2.39.6
n8n versions 2.40.0 through 2.40.0
Description
An approval bypass exists in the Send and Wait node when using the Approve Within Chat mode. This allows unauthenticated users to submit resume requests without the system verifying the requester's identity or approval permissions, which can lead to the advancement of waiting executions and the triggering of guarded actions.
Recommendations
Update n8n to version 2.39.6 or later.
Update n8n to version 2.40.1 or later.
استغلال
إصلاح
Missing Authorization
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
N8N