33 matches found
CVE-2026-118677 n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instance
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a missing confirmation vulnerability in the Local Gateway desktop app that allows its deep-link connect handler to silently re-pair the app with a different n8n instance. Attackers can lure users running the Local Gateway into opening a crafted...
CVE-2026-118677 n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instance
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a missing confirmation vulnerability in the Local Gateway desktop app that allows its deep-link connect handler to silently re-pair the app with a different n8n instance. Attackers can lure users running the Local Gateway into opening a crafted...
CVE-2026-118677
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a missing confirmation vulnerability in the Local Gateway desktop app that allows its deep-link connect handler to silently re-pair the app with a different n8n instance. Attackers can lure users running the Local Gateway into opening a crafted...
EUVD-2026-112383
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a missing confirmation vulnerability in the Local Gateway desktop app that allows its deep-link connect handler to silently re-pair the app with a different n8n instance. Attackers can lure users running the Local Gateway into opening a crafted...
CVE-2026-118677
The n8n Local Gateway desktop app versions before 2.41.4 and 2.42.x before 2.42.1 are vulnerable to a missing confirmation flaw in the deep-link connect handler. This allows an attacker to lure users into clicking a crafted n8n-computer-use:// link, which can silently re-pair the app with an atta...
n8n authorization issue vulnerability
Versions prior to n8n 2.41.4 and versions 2.42.x prior to 2.42.1 contain an authorization issue vulnerability. This vulnerability stems from a lack of confirmation mechanisms in the Local Gateway desktop application. Its deep link handler can silently re-pair the application to a different n8n...
PT-2026-129151
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a missing confirmation vulnerability in the Local Gateway desktop app that allows its deep-link connect handler to silently re-pair the app with a different n8n instance. Attackers can lure users running the Local Gateway into opening a crafted...
CVE-2026-16101
Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device. See V1 in BLERP paper below...
CVE-2026-19292
The CVE-2026-19292 entry describes a Bluetooth re-pairing flow where pairing with a legitimate device can switch to a lower security level than before, making brute-force attempts on the Long-Term Key (LTK) easier. The issue is documented with CVSS 3.1 base metrics (8.8, HIGH) and an adjacent att...
CVE-2026-19292 Bluetooth re-pairing with legitimate device can use lower security level
Re-pairing with a legitimate device can use a lower security level than previous making brute-forcing the LTK easier. See V4 in the BLERP paper linked below...
EUVD-2026-57927
Re-pairing with a legitimate device can use a lower security level than previous making brute-forcing the LTK easier. See V4 in the BLERP paper linked below...
CVE-2026-19291 Bluetooth re-pairing can use a lower security level than previous
Bluetooth re-pairing with an existing device can use a lower security level. RS9116W and SiWx91x impacted. See V3 in the BLERP paper linked below...
CVE-2026-19291
The CVE-2026-19291 issue affects RS9116W and SiWx91x devices during Bluetooth re-pairing, where re-pairing with an existing device can use a lower security level than the previous pairing. The connection in the documents notes the problem and references the BLERP paper for details, implying a dow...
CVE-2026-19291 Bluetooth re-pairing can use a lower security level than previous
Bluetooth re-pairing with an existing device can use a lower security level. RS9116W and SiWx91x impacted. See V3 in the BLERP paper linked below...
EUVD-2026-57926
Bluetooth re-pairing with an existing device can use a lower security level. RS9116W and SiWx91x impacted. See V3 in the BLERP paper linked below...
CVE-2026-16101
The CVE concerns Silicon Labs RS9116W and SiWx917 wireless components. A spoofed, already bonded device can force re-pairing with a rogue device, effectively re-bonding security associations and potentially granting adjacent attackers high-impact access. The vulnerability stems from improper bond...
PT-2026-71610
Re-pairing with a legitimate device can use a lower security level than previous making brute-forcing the LTK easier. See V4 in the BLERP paper linked below...
PT-2026-71609
Bluetooth re-pairing with an existing device can use a lower security level. RS9116W and SiWx91x impacted. See V3 in the BLERP paper linked below...
CVE-2026-19291: Authentication Bypass by Spoofing
Bluetooth re-pairing with an existing device can use a lower security level. RS9116W and SiWx91x impacted. See V3 in the BLERP paper linked below...