Vulnerabilities

TI-2026-40141 CVE-2026-55608 · GHSA-2cf7-hpwf-47h9

n8n-MCP: Incorrect authorization can expose default-scope workflow version backups in multi-tenant HTTP mode

LOW 24

n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0028 Published 2026-07-15 Fixed in 2.57.4 CWE-200

TI-2026-38986 CVE-2026-54052 · GHSA-j6r7-6fhx-77wx

n8n-MCP: Cross-tenant access to workflow version backups in multi-tenant HTTP deployments

MEDIUM 43

n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00388 Published 2026-07-15 Fixed in 2.56.1 CWE-639

TI-2026-33331 CVE-2026-45582 · GHSA-f3rg-xqjj-cj9w

n8n-MCP: Workflow telemetry sanitizer could retain partial values from URL-shaped node parameters

LOW 28

n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00262 Published 2026-05-29 Fixed in 2.51.3 CWE-201

TI-2026-33447 CVE-2026-45707 · GHSA-jxx9-px88-pj69

Improper access control in czlonkowski n8n-mcp

LOW 35

n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00235 Published 2026-05-29 Fixed in 2.51.2 CWE-284

TI-2026-32585 CVE-2026-44694 · GHSA-cmrh-wvq6-wm9r

n8n-MCP: Authenticated SSRF in n8n-mcp webhook and API client paths

LOW 33

n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00235 Published 2026-05-08 Fixed in 2.50.2 CWE-367

TI-2026-30593 CVE-2026-42282 · GHSA-wg4g-395p-mqv3

n8n-MCP: Sensitive MCP tool-call arguments logged on authenticated requests in HTTP mode

LOW 20

n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00251 Published 2026-05-08 Fixed in 2.47.13 CWE-532

TI-2026-30081 CVE-2026-41495 · GHSA-pfm2-2mhg-8wpx

n8n-MCP Logs Sensitive Request Data on Unauthorized /mcp Requests

LOW 30

n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00255 Published 2026-05-08 Fixed in 2.47.11 CWE-532

TI-2026-30738 CVE-2026-42449 · GHSA-56c3-vfp2-5qqj

n8n-MCP: IPv4-mapped IPv6 addresses bypass SSRF protection in validateUrlSync(), enabling full SSRF for SDK embedders

LOW 36

n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00206 Published 2026-05-07 Fixed in 2.47.14 CWE-918

TI-2026-28830 CVE-2026-39974 · GHSA-4ggg-h7ph-26qr

n8n-MCP has an Authenticated SSRF via instance-URL header in multi-tenant HTTP mode

LOW 37

n8n-MCP is a Model Context Protocol (MCP) server that provides AI assistants with comprehensive access to n8n node documentation, properties, and operations.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00322 Published 2026-04-09 Fixed in 2.47.4 CWE-918

Vulnerabilities

Filters