Vulnerability · Published Sep 15, 2025 · Assigned by GitHub_M

CVE-2025-58177n8n stored cross-site scripting in LangChain Chat Trigger node initialMessages parameter

Medium 5.4

In plain English

A medium-severity cross-site scripting in n8n from n8n-io. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.4Medium

Exploit odds (30 days)0.2%top 84.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

n8n is an open source workflow automation platform. From 1.24.0 to before 1.107.0, there is a stored cross-site scripting (XSS) vulnerability in @n8n/n8n-nodes-langchain.chatTrigger. An authorized user can configure the LangChain Chat Trigger node with malicious JavaScript in the initialMessages field and enable public access so that the payload is executed in the browser of any user who visits the resulting public chat URL. This can be used for phishing or to steal cookies or other sensitive data from users accessing the public chat link. The issue is fixed in version 1.107.0. Updating to 1.107.0 or later is recommended. As a workaround, the affected chatTrigger node can be disabled. No other workarounds are known.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
npm	n8n	1.107.0	GHSA-mvh4-2cm2-6hpg

Affected products (as reported)

Vendor	Product	Versions
n8n-io	n8n	>= 1.24.0, < 1.107.0

Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

References

https://github.com/n8n-io/n8n/security/advisories/GHSA-mvh4-2cm2-6hpg x_refsource_CONFIRM
https://github.com/n8n-io/n8n/pull/18148 x_refsource_MISC
https://github.com/n8n-io/n8n/commit/d4ef191be0b39b65efa68559a3b8d5dad2e102b2 x_refsource_MISC