{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-56353", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2026-06-20T18:13:07.364Z", "datePublished": "2026-07-15T11:25:29.334Z", "dateUpdated": "2026-07-15T11:25:29.334Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-07-15T11:25:29.334Z"}, "datePublic": "2026-02-25T00:00:00.000Z", "title": "n8n - Authentication Bypass in Chat Trigger Node", "descriptions": [{"lang": "en", "value": "n8n contains an authentication bypass in the Chat Trigger node when configured with n8n User Auth (a non-default configuration). In affected releases \u2014 before 1.123.22, the 2.0.0 through 2.9.2 line, and 2.10.0 \u2014 the authentication check on the Chat Trigger webhook endpoint can be circumvented, allowing access without valid credentials. Fixed in 1.123.22, 2.9.3, and 2.10.1."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Improper Authentication", "cweId": "CWE-287", "type": "CWE"}]}], "affected": [{"vendor": "n8n", "product": "n8n", "defaultStatus": "unaffected", "packageURL": "pkg:npm/n8n", "versions": [{"version": "0", "status": "affected", "versionType": "semver", "lessThan": "1.123.22"}, {"version": "1.123.22", "status": "unaffected", "versionType": "semver"}, {"version": "2.0.0", "status": "affected", "versionType": "semver", "lessThan": "2.9.3"}, {"version": "2.9.3", "status": "unaffected", "versionType": "semver"}, {"version": "2.10.0", "status": "affected", "versionType": "semver", "lessThan": "2.10.1"}, {"version": "2.10.1", "status": "unaffected", "versionType": "semver"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*", "versionEndExcluding": "1.123.22"}, {"vulnerable": true, "criteria": "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*", "versionStartIncluding": "2.0.0", "versionEndExcluding": "2.9.3"}, {"vulnerable": true, "criteria": "cpe:2.3:a:n8n:n8n:*:*:*:*:*:node.js:*:*", "versionStartIncluding": "2.10.0", "versionEndExcluding": "2.10.1"}]}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N", "attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 6.3, "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1"}, "format": "CVSS"}], "references": [{"url": "https://github.com/n8n-io/n8n/security/advisories/GHSA-jh8h-6c9q-7gmw", "name": "GitHub Security Advisory (GHSA-jh8h-6c9q-7gmw)", "tags": ["vendor-advisory"]}, {"name": "VulnCheck Advisory: n8n - Authentication Bypass in Chat Trigger Node", "tags": ["third-party-advisory"], "url": "https://www.vulncheck.com/advisories/n8n-authentication-bypass-in-chat-trigger-node"}], "credits": [{"lang": "en", "value": "sm1ee", "type": "reporter"}], "x_generator": {"engine": "vulncheck-endgame"}}}}

{}

{}

{}