CVE-2026-86077 | n8n-io n8n up to 2.37.6/2.38.1 Chat Execution Manager chat-execution-manager.ts canResumeOverChat resumeToken improper authorization (WID-SEC-2026-3165)

A vulnerability was found in n8n-io n8n up to 2.37.6/2.38.1. It has been rated as critical. Affected by this issue is the function canResumeOverChat of the file packages/cli/src/chat/chat-execution-manager.ts of the component Chat Execution Manager. This manipulation of the argument resumeToken causes improper authorization. This vulnerability is... Weiterlesen