10 matches found
n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket
Impact The /chat WebSocket route resumed a paused execution from a resume token without checking that the node being resumed was a chat node. n8n hands that token to anonymous form submitters, so a party with no account could present it on the chat route and release an execution waiting at an...
6.5CVSS5.7AI score0.00432EPSS
SaveExploits0References5Affected Software1
20