Security
فارسی
All products

n8n-mcp

npm · Package
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
n8n-MCP: Incorrect authorization can expose default-scope workflow version backups in multi-tenant HTTP modeCVE-2026-55608 · GHSA-2CF7-HPWF-47H9 n8n-mcp npm Medium Fix reported
n8n-MCP: Cross-tenant access to workflow version backups in multi-tenant HTTP deploymentsCVE-2026-54052 · GHSA-J6R7-6FHX-77WX n8n-mcp npm Critical Fix reported
n8n-MCP: Multi-tenant MCP requests fall back to process-level n8n credentials when tenant headers are absent or incompleteCVE-2026-45707 · GHSA-JXX9-PX88-PJ69 n8n-mcp npm High Fix reported
n8n-MCP: Workflow telemetry sanitizer could retain partial values from URL-shaped node parametersCVE-2026-45582 · GHSA-F3RG-XQJJ-CJ9W n8n-mcp npm Medium Fix reported
n8n-mcp webhook and API client paths has an authenticated SSRFCVE-2026-44694 · GHSA-CMRH-WVQ6-WM9R n8n-mcp npm High Fix reported
n8n-MCP: Sensitive MCP tool-call arguments logged on authenticated requests in HTTP modeCVE-2026-42282 · GHSA-WG4G-395P-MQV3 n8n-mcp npm Medium Fix reported
n8n-MCP Logs Sensitive Request Data on Unauthorized /mcp RequestsCVE-2026-41495 · GHSA-PFM2-2MHG-8WPX n8n-mcp npm Medium Fix reported
n8n-mcp's IPv4-mapped IPv6 addresses bypass SSRF protection in validateUrlSync(), enabling full SSRF for SDK embeddersCVE-2026-42449 · GHSA-56C3-VFP2-5QQJ n8n-mcp npm High Fix reported
n8n-mcp affected by path traversal, redirect-following SSRF, and telemetry payload exposureGHSA-8G7G-HMWM-6RV2 n8n-mcp npm High Fix reported
n8n-mcp has unauthenticated session termination and information disclosure in HTTP transportGHSA-75HX-XJ24-MQRW n8n-mcp npm High Fix reported
n8n-mcp has authenticated SSRF via instance-URL header in multi-tenant HTTP modeCVE-2026-39974 · GHSA-4GGG-H7PH-26QR n8n-mcp npm High Fix reported