CVE-2026-103260

Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.39.6 n8n versions 2.40.0 through 2.40.0

Description An approval bypass exists in the Send and Wait node when using the Approve Within Chat mode. This allows unauthenticated users to submit resume requests without the system verifying the requester's identity or approval permissions, which can lead to the advancement of waiting executions and the triggering of guarded actions.

Recommendations Update n8n to version 2.39.6 or later. Update n8n to version 2.40.1 or later.