n8n-mcp has unauthenticated session termination and information disclosure in HTTP transport
Key facts
- Attack vector
- —
- Privileges required
- —
- User interaction
- —
- Attack complexity
- —
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- —
- Fix status
- Fixed
No CVSS vector from any source. Fix status from GitHub. Impact type from CWE-306.
Summary
### Summary Several HTTP transport endpoints in n8n-mcp lacked proper authentication, and the health check endpoint exposed sensitive operational metadata without credentials. ### Impact An unauthenticated attacker with network access to the n8n-mcp HTTP server could disrupt active MCP sessions and gather information useful for further attacks. ### Patches Fixed in **v2.47.6**. All MCP session endpoints now require Bearer authentication. The health check endpoint has been reduced to a minimal liveness response. ### Workarounds If you cannot upgrade immediately: - **Restrict network access** to the HTTP server using firewall rules, reverse proxy IP allowlists, or a VPN so that only trusted clients can reach it. - **Use stdio mode** (`MCP_MODE=stdio`) instead of HTTP mode. The stdio transport does not expose any HTTP endpoints and is unaffected by this vulnerability. Upgrading to v2.47.6 is still strongly recommended. ### Credit Reported by @yotampe-pluto.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | n8n-mcp (npm) | before 2.47.6 | 2.47.6 | Patch available | GHSA-75hx-xj24-mqrw |
- n8n-mcp (npm) Vendor— Affected before 2.47.6 Fixed in 2.47.6 Patch available GHSA-75hx-xj24-mqrw
Remediation
- Fix · GHSA-75hx-xj24-mqrw n8n-mcp (npm) Fixed in 2.47.6 Advisory →
Timeline
- 2026-10-03 Threatist record created from GHSA-75hx-xj24-mqrw
References
Sources
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences