n8n npm Package Vulnerability: Approval-Gate Bypass via resumeToken

Severity

HIGH

Affected component

n8n (npm)

Affected versions

>= 2.28.0, < 2.28.1 or < 2.27.4 or < 1.123.55 or >= 2.26.0, < 2.26.2 or >= 2.0.0-rc.0, < 2.25.7 or < 1.123.22 or >= 2.0.0, < 2.9.3 or >= 2.10.0, < 2.10.1 or >= 2.26.0, < 2.26.2 or < 2.25.7 or < 2.19.3 or < 1.123.67 or >= 2.32.0, < 2.32.1 or >= 2.0.0-rc.0, < 2.31.5 or < 1.121.0 or < 2.28.0 or < 2.27.4 or < 1.123.76 or >= 2.38.0, < 2.38.2 or >= 2.0.0, < 2.37.7 or >= 2.38.0, < 2.38.2 or < 2.37.7 or < 1.123.64 or >= 2.30.0, < 2.30.1 or >= 2.0.0-rc.0, < 2.29.8 or >= 2.7.0, < 2.8.0 or < 2.6.4 or <= 1.114.4 or < 2.20.0 or < 1.123.18 or >= 2.0.0, < 2.6.2 or < 1.123.27 or >= 2.14.0, < 2.14.1 or >= 2.14.0, <= 2.14.0 or >= 2.0.0-rc.0, < 2.13.3 or < 1.123.55 or >= 2.26.0, < 2.26.2 or >= 2.0.0-rc.0, < 2.25.7 or < 2.5.0 or < 1.123.32 or >= 2.18.0, < 2.18.1 or >= 2.17.0, < 2.17.4 or < 1.123.32 or >= 2.18.0, < 2.18.1 or >= 2.0.0, < 2.17.4 or >= 1.65.0, < 1.114.3 or < 1.123.32 or >= 2.18.0, < 2.18.1 or >= 2.17.0, < 2.17.4 or < 1.123.43 or >= 2.21.0, < 2.22.1 or >= 2.0.0-rc.0, < 2.20.7 or < 1.114.0 or >= 2.14.0, < 2.14.1 or >= 2.14.0, <= 2.14.0 or >= 2.0.0-rc.0, < 2.13.3 or < 1.123.27 or < 1.98.0 or < 1.123.48 or >= 2.22.0, < 2.22.4 or >= 2.0.0-rc.0, < 2.21.8 or < 1.123.17 or >= 2.0.0, < 2.4.5 or >= 2.5.0, < 2.5.1 or >= 1.0.0, < 2.0.0 or >= 2.32.0, < 2.32.1 or < 2.31.5 or < 1.123.67 or >= 2.32.0, < 2.32.1 or >= 2.0.0-rc.0, < 2.31.5 or < 1.123.55 or >= 2.26.0, < 2.26.2 or >= 2.0.0-rc.0, < 2.25.7 or < 1.123.17 or >= 2.0.0, < 2.5.2 or < 1.123.43 or >= 2.21.0, < 2.21.1 or >= 2.0.0-rc.0, < 2.20.7 or < 1.123.67 or >= 2.32.0, < 2.32.1 or >= 2.0.0-rc.0, < 2.31.5 or < 1.123.76 or >= 2.38.0, < 2.38.2 or >= 2.0.0, < 2.37.7 or < 1.123.32 or >= 2.18.0, < 2.18.1 or >= 2.0.0, < 2.17.4 or < 1.123.22 or >= 2.0.0, < 2.9.3 or >= 2.10.0, < 2.10.1 or < 1.123.61 or >= 2.28.0, < 2.28.1 or >= 2.0.0-rc.0, < 2.27.4 or >= 2.30.0, < 2.30.1 or < 2.29.8 or >= 0.187.0, < 1.120.3 or >= 2.38.0, < 2.38.2 or < 2.37.7 or >= 1.123.0, < 1.123.2 or < 1.122.5 or >= 2.32.0, < 2.32.1 or < 2.31.5 or < 2.4.8 or < 1.123.64 or >= 2.30.0, < 2.30.1 or >= 2.0.0-rc.0, < 2.29.8 or < 0.216.1 or < 1.123.26 or >= 2.14.0, < 2.14.1 or >= 2.14.0, <= 2.14.0 or >= 2.0.0-rc.0, < 2.13.3 or >= 2.26.0, < 2.26.2 or < 2.25.7 or < 1.123.67 or >= 2.32.0, < 2.32.1 or >= 2.0.0-rc.0, < 2.31.5 or >= 2.0.0, < 2.5.0 or < 1.123.10 or < 1.123.48 or >= 2.22.0, < 2.22.4 or >= 2.0.0-rc.0, < 2.21.8 or < 1.123.64 or >= 2.30.0, < 2.30.1 or >= 2.0.0-rc.0, < 2.29.8 or < 1.123.64 or >= 2.30.0, < 2.30.1 or >= 2.0.0-rc.0, < 2.29.8 or < 1.123.64 or >= 2.30.0, < 2.30.1 or >= 2.0.0-rc.0, < 2.29.8 or >= 2.26.0, < 2.26.2 or < 2.25.7 or >= 2.0.0-rc.0, < 2.4.0 or < 1.121.0 or < 1.90.0 or < 1.123.43 or >= 2.21.0, < 2.22.1 or >= 2.0.0-rc.0, < 2.20.7 or < 1.123.67 or >= 2.32.0, < 2.32.1 or >= 2.0.0-rc.0, < 2.31.5 or < 2.4.0 or < 1.123.32 or >= 2.18.0, < 2.18.1 or >= 2.0.0, < 2.17.4 or < 1.123.32 or >= 2.18.0, < 2.18.1 or >= 2.0.0, < 2.17.4 or >= 2.30.0, < 2.30.1 or < 2.29.8 or < 2.10.0 or < 1.123.23 or >= 2.0.0-rc.0, < 2.6.4 or < 1.123.64 or >= 2.30.0, < 2.30.1 or >= 2.0.0-rc.0, < 2.29.8 or < 1.123.67 or >= 2.32.0, < 2.32.1 or >= 2.0.0-rc.0, < 2.31.5 or >= 2.0.0, < 2.5.0 or < 1.123.18 or < 1.106.0 or < 1.99.1 or < 1.123.64 or >= 2.30.0, < 2.30.1 or >= 2.0.0, < 2.29.8 or >= 2.32.0, < 2.32.1 or < 2.31.5 or >= 2.26.0, < 2.26.2 or < 2.25.7 or >= 2.28.0, < 2.28.1 or < 2.27.4 or < 2.24.0 or >= 1.77.0, < 1.98.2 or >= 2.38.0, < 2.38.2 or < 2.37.7 or < 1.123.32 or >= 2.18.0, < 2.18.1 or >= 2.0.0, < 2.17.4 or >= 2.18.0, < 2.18.1 or >= 2.17.0, < 2.17.4 or < 1.123.32 or < 1.118.0 or >= 2.0.0, < 2.4.0 or < 1.123.55 or >= 2.26.0, < 2.26.2 or >= 2.0.0-rc.0, < 2.25.7 or < 1.123.76 or >= 2.38.0, < 2.38.2 or >= 2.0.0, < 2.37.7 or < 1.123.61 or >= 2.28.0, < 2.28.1 or >= 2.0.0-rc.0, < 2.27.4 or < 1.123.67 or >= 2.32.0, < 2.32.1 or >= 2.0.0-rc.0, < 2.31.5 or >= 1.2.1, < 2.0.0 or < 1.123.76 or >= 2.38.0, < 2.38.2 or >= 2.0.0, < 2.37.7 or >= 0.150.0, < 2.2.2 or < 1.123.22 or >= 2.0.0, < 2.9.3 or >= 2.10.0, < 2.10.1 or < 1.123.22 or >= 2.0.0, < 2.9.3 or >= 2.10.0, < 2.10.1 or < 1.123.61 or >= 2.28.0, < 2.28.1 or >= 2.0.0-rc.0, < 2.27.4 or < 2.24.0 or < 2.24.0 or < 1.123.67 or >= 2.32.0, < 2.32.1 or >= 2.0.0-rc.0, < 2.31.5 or >= 2.26.0, < 2.26.2 or < 2.25.7 or >= 2.26.0, < 2.26.2 or < 2.25.7 or < 1.123.27 or >= 2.14.0, < 2.14.1 or >= 2.14.0, <= 2.14.0 or >= 2.0.0-rc.0, < 2.13.3 or >= 2.0.0, < 2.4.0 or < 1.123.12 or < 1.123.43 or >= 2.21.0, < 2.21.1 or >= 2.0.0-rc.0, < 2.20.7 or < 1.123.22 or >= 2.0.0, < 2.9.3 or >= 2.10.0, < 2.10.1 or < 1.123.32 or >= 2.18.0, < 2.18.1 or >= 2.0.0, < 2.17.4 or >= 2.28.0, < 2.28.1 or < 2.27.4 or < 1.123.15 or >= 2.0.0, < 2.5.0 or >= 1.24.0, < 1.107.0 or >= 2.14.0, < 2.14.1 or >= 2.14.0, <= 2.14.0 or >= 2.0.0-rc.0, < 2.13.3 or < 1.123.27 or < 1.123.64 or >= 2.30.0, < 2.30.1 or >= 2.0.0-rc.0, < 2.29.8 or < 0.216.1 or >= 2.32.0, < 2.32.1 or < 2.31.5 or < 1.123.64 or >= 2.30.0, < 2.30.1 or >= 2.0.0-rc.0, < 2.29.8 or < 1.123.55 or >= 2.26.0, < 2.26.2 or >= 2.0.0-rc.0, < 2.25.7 or < 1.99.0 or < 1.123.61 or >= 2.28.0, < 2.28.1 or >= 2.0.0-rc.0, < 2.27.4 or >= 2.0.0-rc.0, < 2.11.2 or < 1.123.25 or < 1.123.32 or >= 2.18.0, < 2.18.1 or >= 2.17.0, < 2.17.4 or >= 2.30.0, < 2.30.1 or < 2.29.8 or < 1.123.27 or >= 2.14.0, < 2.14.1 or >= 2.14.0, <= 2.14.0 or >= 2.0.0-rc.0, < 2.13.3 or >= 2.0.0, < 2.2.1 or < 1.123.9 or >= 2.26.0, < 2.26.2 or < 2.25.7 or >= 2.17.0, < 2.17.5 or < 1.123.33 or < 1.123.32 or >= 2.18.0, < 2.18.1 or >= 2.0.0, < 2.17.4 or < 0.216.1 or < 1.123.67 or >= 2.32.0, < 2.32.1 or >= 2.0.0-rc.0, < 2.31.5 or < 1.123.55 or >= 2.26.0, < 2.26.1 or >= 2.0.0-rc.0, < 2.25.7 or >= 0.123.0, < 1.121.3 or >= 1.65.0, < 1.121.0 or < 1.123.55 or >= 2.26.0, < 2.26.2 or >= 2.0.0-rc.0, < 2.25.7 or >= 0.211.0, < 1.120.4 or >= 1.121.0, < 1.121.1 or >= 2.32.0, < 2.32.1 or < 2.31.5 or < 2.8.0 or < 1.123.22 or >= 2.0.0, < 2.9.3 or >= 2.10.0, < 2.10.1 or < 2.8.0 or >= 2.11.0, < 2.12.0 or >= 2.0.0-rc.0, < 2.10.4 or < 1.123.24 or < 1.123.27 or >= 2.14.0, < 2.14.1 or >= 2.14.0, <= 2.14.0 or >= 2.0.0-rc.0, < 2.13.3 or >= 2.0.0, < 2.28.0 or < 1.123.58 or >= 1.36.0, < 2.2.0 or >= 0.123.1, < 1.119.2 or < 1.123.43 or >= 2.21.0, < 2.22.1 or >= 2.0.0-rc.0, < 2.20.7 or < 1.123.22 or >= 2.0.0, < 2.9.3 or >= 2.10.0, < 2.10.1 or < 1.123.8 or >= 2.0.0, < 2.2.0 or >= 2.30.0, < 2.30.1 or < 2.29.8 or < 2.24.0 or < 1.113.0 or < 1.123.67 or >= 2.32.0, < 2.32.1 or >= 2.0.0-rc.0, < 2.31.5 or < 1.123.22 or >= 2.10.0, < 2.10.1 or >= 2.0.0-rc.0, < 2.9.3 or < 1.123.67 or >= 2.32.0, < 2.32.1 or >= 2.0.0-rc.0, < 2.31.5

Patched version

2.37.7, 2.38.2

The n8n npm package has a vulnerability where a reused resume token over the chat WebSocket could bypass an anonymous approval gate. This allowed unauthorized parties to release executions waiting at an approval gate.

What happened

The n8n npm package had a vulnerability where a reused resume token over the chat WebSocket could bypass an anonymous approval gate. This allowed unauthorized parties to release executions waiting at an approval gate. The issue has been fixed in versions 2.37.7 and 2.38.2. Affected versions include those greater than or equal to 2.28.0 and less than 2.28.1, among others. The full list of affected versions is extensive and includes various ranges and specific versions.

This vulnerability is classified as high severity. It is not yet confirmed to be exploited in the wild. The timeline indicates it was first flagged on 2026-09-10T20:37:00+00:00. The recommended action is to upgrade to n8n version 2.37.7 or 2.38.2 or later to remediate the vulnerability.

What to do about it

• Identify the version of n8n you are currently using.
• Check if your version is within the affected ranges as listed in the threat data.
• Upgrade to n8n version 2.37.7 or 2.38.2 or later to remediate the vulnerability.
• Monitor the primary sources for any updates or additional information regarding this vulnerability.

How 0Day would have caught this

Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.

Frequently asked questions

Sources

• [GHSA-34ff-336r-5q23] n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node
• [GHSA-35jj-42hp-8gmq] n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket

Join the 0Day waitlist →

← Back to all threats