CVE-2026-118640

n8n Chat Hub lets chat-only users invoke restricted tools

n8n · n8n Chat Hub

First documented disclosure · Review checkpoint

Summary

Chat-only users could exceed their assigned role through tool registration.

Severity and exploitation evidence

Medium · 5.3/10 · CVSS 4.0. Severity source.

Exploitation not established: No malicious exploitation or victim compromise established by reviewed primary sources.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Incomplete tool-type restrictions allowed Chat Hub users to add capabilities blocked by their role.

Conditions required

Authenticated global:chatUser access and enabled Chat Hub.

Potential impact

Sandboxed code execution, permitted-file access, and use of instance workflows, Data Tables and agents; not an established sandbox escape.

Affected versions and configurations

Before 1.123.85; 2.x before 2.43.5; 2.44.0.

Fix and mitigation status

1.123.85, 2.43.5 and 2.44.1 for the corresponding branches.

Practical next steps

Upgrade. Temporarily restrict chat-user assignments to trusted users or disable Chat Hub; exclusions and SSRF protection are partial mitigations.

Operating lesson

Enforce roles at tool registration and execution, including tools invoked indirectly by chat.

Evidence and limits

The vendor advisory is dated October 14, matching the publication dates displayed by all three fixed-release pages; October 28 is later CNA publication. No earlier issue-specific public patch was verified. CVSS 4.0 5.3 is source-attributed. These releases address this issue only.

Sources