CVE-2026-110841: Authorization Bypass Through User-Controlled Key in n8n-io n8n

CVE-2026-110841 describes an authorization bypass in n8n prior to versions 2.41.4 and 2.42.0. The vulnerability exists in the agent chat resume endpoint, which accepts a run identifier from the request body but fails to verify that the suspended checkpoint belongs to the authenticated caller. As a result, authenticated project members can list and read private agent conversations of other members within the same project. They can then approve pending tool calls in those conversations, leading to execution of tools and writing of results into the victim's conversation context.

An attacker with authenticated project member privileges can access and manipulate private conversations of other members, potentially causing unauthorized execution of tools and modification of conversation data. This can lead to unauthorized data exposure and unintended actions within the affected environment. The CVSS 4.0 score of 6.1 (medium severity) reflects the moderate impact due to required authentication and limited scope of privilege escalation.

A fix is available in n8n versions 2.41.4 and later. Users should upgrade to version 2.41.4 or above to remediate this authorization bypass vulnerability. No additional mitigation steps are indicated beyond applying the official patch.