{"id":"CVE-2026-103250","published":"2026-10-01T11:17:18.777","lastModified":"2026-10-06T01:16:32.340","description":"n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a NoSQL injection vulnerability in the MongoDB Chat Memory node that fails to validate the sessionId parameter. Unauthenticated attackers can supply MongoDB query operators in the sessionId field to access conversation histories from other users and perform unauthorized write and delete operations.","cvssScore":8.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:L","cwes":["CWE-943"],"vendors":[],"products":[],"references":[{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-w24g-6454-7w7f","tags":[]},{"url":"https://www.vulncheck.com/advisories/n8n-before-1.123.80-2.39.6-and-2.40.1-nosql-injection-via-mongodb-chat-memory","tags":[]}],"exploitRefs":[{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-w24g-6454-7w7f","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw is a NoSQL injection vulnerability in the MongoDB Chat Memory node of n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1, allowing unauthenticated attackers to access and manipulate conversation histories.","exploitability":"Exploitation is relatively easy as it requires supplying MongoDB query operators in the sessionId field. The attacker must have access to the endpoint.","blast_radius":"If exploited, attackers can access and modify conversation histories of other users, leading to potential data breaches and unauthorized actions.","remediation":"Upgrade to n8n version 1.123.80 or later, 2.39.6 or later, or 2.40.1 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["nosql-injection","unauth-access","web"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-05T08:44:01.887Z"}}