PT-2026-103787

CVE-2026-103254

Published

2026-10-01

Updated

2026-10-06

Description by

CVSS 4.0

7.0

High

MetricsAV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.80 n8n versions 2.0.0 through 2.39.5 n8n versions 2.40.0

Description A path traversal issue exists in the signed resume URL generation for Send-and-Wait approvals. Users with workflow creation permissions can forge approval URLs for gates in projects they are not authorized to access. This is achieved by exploiting unresolved traversal sequences within caller-controlled node IDs, allowing for cross-project approval forgery.

Recommendations Update n8n to version 1.123.80 or later. Update n8n to version 2.39.6 or later. Update n8n to version 2.40.1 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Tr4Ce-Ju

Vendors

Affected products

Weakness enumeration

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')

Related identifiers