CVE-2026-110841

Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.41.4 n8n versions prior to 2.42.0

Description An authorization bypass exists in the agent chat resume endpoint. The system accepts a run identifier from the request body without verifying if the suspended checkpoint belongs to the caller. This allows authenticated project members to list and read private agent conversations of other members via project-scoped endpoints and approve pending tool calls, leading to tool execution and the writing of results into the victim's conversation.

Recommendations Update to version 2.41.4 or later. Update to version 2.42.0 or later.