Advisoriesby Ibisn8nGHSA-42h7-m79w-wvg5
n8n: Stored XSS in Chat Trigger Node
Fix: upgrade to 1.123.55 or later (3 fixed versions below)
Impact
An authenticated user with workflow edit access could inject arbitrary JavaScript into the Chat Trigger's generated page by setting a malicious webhookId. When a logged-in user visited the chat URL, the injected code executed in the n8n origin with that user's session privileges.
Patches
The issue has been fixed in n8n versions 1.123.55, 2.25.7, and 2.26.2. Users should upgrade to one of these versions or later to remediate the vulnerability.
Workarounds
If upgrading is not immediately possible, administrators should consider the following temporary mitigations:
- Limit workflow creation and editing permissions to fully trusted users only.
- Disable the Chat Trigger node by adding
@n8n/n8n-nodes-langchain.chatTriggerto theNODES_EXCLUDEenvironment variable.
These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| n8n npm | < 1.123.55 | 1.123.55 |
| >= 2.26.0, < 2.26.2 | 2.26.2 | |
| >= 2.0.0-rc.0, < 2.25.7 | 2.25.7 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-79
- Also known as
- CVE-2026-54302
More n8n advisories
All n8n
n8n: SecurityScorecard Node Leaks API Token to User-Controlled HostCVE-2026-54304fixed in 1.123.55 +2n8n: MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control SessionsCVE-2026-54309fixed in 2.25.7 +1n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE EndpointsCVE-2026-54305fixed in 1.123.55 +2n8n: Credential Exfiltration via Permission BypassCVE-2026-54307fixed in 1.123.55 +2n8n: Denial of Service via ZIP decompression in webhook workflowCVE-2026-54314fixed in 2.24.0n8n: Public API Execution Retry Authorization BypassCVE-2026-56778fixed in 2.25.7 +1