# CVE-2026-110846: n8n Send-and-Wait HMAC signature bypass in waiting-webhook

Source: https://junglewise.ai/threats/cve-2026-110846-n8n-before-2-41-4-and-2-42-x-before-2-42-1-contains-a-signature  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-14. Updated: 2026-10-20  
License: CC BY 4.0 with a link back

CVE-2026-110846 · Severity: info · Published 2026-10-14

n8n is a workflow automation platform that orchestrates actions across multiple systems. A signature verification bypass in the Send-and-Wait approval node allows an attacker with an execution's resume token to approve workflow steps meant for others, causing downstream actions to run under the workflow owner's credentials—potentially enabling unauthorized command execution or data access.

Technologies: [N8n](https://junglewise.ai/threats/technologies/n8n). Vendors: [N8n](https://junglewise.ai/threats/vendors/n8n).

## Quick answers

**Is CVE-2026-110846 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-110846 being exploited in the wild.

**How severe is CVE-2026-110846?** Informational severity, published 14 October 2026.

**Which products and versions are affected?** N8n before 2.41.4 and 2.42.0 before 2.42.1.

**Is there a fix for CVE-2026-110846?** Yes: fixed in n8n 2.41.4, 2.42.1. Until then: Restrict n8n instance access to fully trusted users only. Avoid using Send-and-Wait nodes that gate high-consequence actions in workflows where unauthenticated trigger nodes expose resumeTokens to external callers. Disable or restrict public webhook and chat trigger endpoints that precede Send-and-Wait approval nodes.</anigation>
<parameter name="timeline">[{"kind": "disclosed", "at": "2026-09-30"}, {"kind": "advisory", "at": "2026-10-14"}] Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-110846 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-110846?** Check whether you run N8n at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in n8n 2.41.4, 2.42.1

Restrict n8n instance access to fully trusted users only. Avoid using Send-and-Wait nodes that gate high-consequence actions in workflows where unauthenticated trigger nodes expose resumeTokens to external callers. Disable or restrict public webhook and chat trigger endpoints that precede Send-and-Wait approval nodes.</anigation>
<parameter name="timeline">[{"kind": "disclosed", "at": "2026-09-30"}, {"kind": "advisory", "at": "2026-10-14"}]

## Technical details

The waiting-webhook endpoint validates Send-and-Wait node references and applies signature checks, but performs validation before normalizing alternate node reference forms, allowing requests using that form to bypass HMAC signature verification. An attacker holding an execution's resume token can exploit this to approve waiting executions belonging to other users and trigger downstream workflow actions with the workflow owner's privileges.

## Affected products

- n8n n8n before 2.41.4 and 2.42.0 before 2.42.1

## References

- [https://github.com/n8n-io/n8n/security/advisories/GHSA-728h-pmr2-7cgh](https://github.com/n8n-io/n8n/security/advisories/GHSA-728h-pmr2-7cgh)
- [https://www.vulncheck.com/advisories/n8n-before-2.41.4-and-2.42.1-send-and-wait-hmac-signature-bypass-via-waiting-webhook](https://www.vulncheck.com/advisories/n8n-before-2.41.4-and-2.42.1-send-and-wait-hmac-signature-bypass-via-waiting-webhook)

## Related threats

- [n8n path traversal in Databricks node](https://junglewise.ai/threats/cve-2026-119557-n8n-from-2-14-0-through-2-46-3-contains-a-path-traversal)
- [n8n remote code execution in deprecated Function nodes](https://junglewise.ai/threats/cve-2026-119408-n8n-before-2-42-6-2-43-x-before-2-43-3-and-3-x-before-3-0-1)
- [n8n Slack Trigger SSRF and token exfiltration](https://junglewise.ai/threats/cve-2026-118679-n8n-before-1-123-83-2-41-4-and-2-42-1-contains-a-server-side)
- [n8n prototype pollution in workflow history compaction](https://junglewise.ai/threats/cve-2026-118678-n8n-before-2-41-4-and-2-42-x-before-2-42-1-contains-a-prototype)
- [n8n Local Gateway deep-link missing confirmation re-pairing](https://junglewise.ai/threats/cve-2026-118677-n8n-before-2-41-4-and-2-42-x-before-2-42-1-contains-a-missing)