Is CVE-2026-118640 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-118640 being exploited in the wild.

How severe is CVE-2026-118640?

Medium severity, with a CVSS score of 5.4, published 28 October 2026.

Which products and versions are affected?

N8n before 1.123.85, before 2.43.5, before 2.44.1.

Am I affected by CVE-2026-118640?

Check whether you run N8n at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-118640: n8n Chat Hub authorization bypass in tool registration

CVE-2026-118640 · Severity: medium · CVSS 5.4 · Published 2026-10-28

n8n is a workflow automation platform that allows users to build and execute automations. Chat Hub is a feature that lets users interact with these automations through a chat interface. A vulnerability allows chat-only users to register and run restricted tool types they should not have access to, enabling them to execute code, read and write files, and access instance workflows and data beyond their intended permissions.

Technologies: N8n. Vendors: N8n.

Quick answers

Is CVE-2026-118640 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-118640 being exploited in the wild.
How severe is CVE-2026-118640?: Medium severity, with a CVSS score of 5.4, published 28 October 2026.
Which products and versions are affected?: N8n before 1.123.85, before 2.43.5, before 2.44.1.
Is there a fix for CVE-2026-118640?: Yes: fixed in n8n 1.123.85, 2.43.5, 2.44.1. Until then: Restrict n8n instance access to fully trusted users only. Do not assign the global:chatUser role to any user who is not fully trusted until the instance is patched. Disable Chat Hub if it is not required. Use the NODES_EXCLUDE environment variable to remove high-risk node types, or enable N8N_SSRF_PROTECTION_ENABLED=true to reduce outbound request abuse impact.</anigation> <parameter name="attack_vector">["network"] Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-118640 attacked?: It is in a hosted service.
Am I affected by CVE-2026-118640?: Check whether you run N8n at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: n8n 1.123.85, 2.43.5, 2.44.1

Restrict n8n instance access to fully trusted users only. Do not assign the global:chatUser role to any user who is not fully trusted until the instance is patched. Disable Chat Hub if it is not required. Use the NODES_EXCLUDE environment variable to remove high-risk node types, or enable N8N_SSRF_PROTECTION_ENABLED=true to reduce outbound request abuse impact.</anigation> <parameter name="attack_vector">["network"]

Technical details

The vulnerability is an authorization bypass (CWE-863) in Chat Hub that fails to properly restrict tool types for users with the global:chatUser role. Users with this role can register and execute tools that run code in the task runner sandbox, access the file system, and invoke instance workflows and Data Tables, despite chat-only users being expected to have limited capabilities. The issue affects versions before 1.123.85, 2.43.5, and 2.44.1, and requires prior authentication to exploit.

Affected products

n8n n8n before 1.123.85, before 2.43.5, before 2.44.1

Timeline

2026-10-28: disclosed
2026-10-28: patched

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.