{"schema":"threatline.record/2","record":{"id":"GHSA-pwj5-wwm6-g83j","aliases":["GHSA-pwj5-wwm6-g83j"],"summary":"Chat Trigger Embedded Chat Does Not Enforce n8n User Auth on All Requests","details":"## Impact\n\nThe Chat Trigger exempted its `setup` GET webhook route from the n8n User Auth check in all chat modes. The exemption was intended only for hosted chat, where the route serves the chat page, but it also applied to embedded chat. On a published Chat Trigger configured with embedded chat mode and n8n User Auth, an unauthenticated GET request to the chat webhook URL bypassed authentication and could read the conversation history of a named session, or trigger the workflow with attacker-supplied input.\n\n## Patches\n\nThe issue has been fixed in n8n versions 1.123.89, 2.45.5, 2.46.1 and 3.0.1. Users should upgrade to one of these versions or later to remediate the vulnerability.\n\n## Workarounds\n\nIf upgrading is not immediately possible, administrators should consider the following temporary mitigations:\n- Restrict n8n instance access to fully trusted users only.\n- Deactivate Chat Trigger workflows configured in embedded chat mode with n8n User Auth until the instance is patched.\n- Apply network-level controls to restrict access to webhook endpoints.\n- Switch affected Chat Trigger workflows to basic auth if embedded chat mode must remain active.\n\nThese workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.","categories":["Frameworks"],"product":"n8n","vendor":"","ecosystem":null,"affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-pwj5-wwm6-g83j","source_modified_at":"2026-10-28T08:48:14Z","fetched_at":"2026-10-28T15:55:58.673066Z","package":{"ecosystem":"npm","name":"n8n"},"range":"< 1.123.89"},{"source":"GitHub Advisory Database","source_url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-pwj5-wwm6-g83j","source_modified_at":"2026-10-28T08:48:14Z","fetched_at":"2026-10-28T15:55:58.673066Z","package":{"ecosystem":"npm","name":"n8n"},"range":"< 2.46.1"},{"source":"GitHub Advisory Database","source_url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-pwj5-wwm6-g83j","source_modified_at":"2026-10-28T08:48:14Z","fetched_at":"2026-10-28T15:55:58.673066Z","package":{"ecosystem":"npm","name":"n8n"},"range":"< 2.45.5"},{"source":"GitHub Advisory Database","source_url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-pwj5-wwm6-g83j","source_modified_at":"2026-10-28T08:48:14Z","fetched_at":"2026-10-28T15:55:58.673066Z","package":{"ecosystem":"npm","name":"n8n"},"range":"< 3.0.1"}],"fixed_versions":[],"cvss":6.3,"severity":"Medium","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-28T08:48:14Z","modified_at":"2026-10-28T08:48:14Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-pwj5-wwm6-g83j","fetched_at":"2026-10-28T15:55:58.673066Z","source_modified_at":"2026-10-28T08:48:14Z"}],"sources":["GitHub Advisory Database"],"references":[],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-28T08:48:14Z","content_hash":"ff703ce05a98e33bfeda34c4e6ade87bca93ca448411efbc9341dee286cb056b"}}