N8n-mcp

This hub aggregates every CVE we track for N8n-mcp, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 12 most recently published vulnerabilities affecting N8n-mcp.

• CVE-2026-55608n8n-MCP: Incorrect authorization can expose default-scope workflow version backups in multi-tenant HTTP mode4.2Jul 15, 2026
• CVE-2026-54052n8n-MCP: Cross-tenant access to workflow version backups in multi-tenant HTTP deployments9.9Jul 15, 2026
• CVE-2026-45582n8n-MCP: Workflow telemetry sanitizer could retain partial values from URL-shaped node parameters6.5May 29, 2026
• CVE-2026-45707n8n-MCP: Multi-tenant MCP requests fall back to process-level n8n credentials when tenant headers are absent or incomplete8.1May 29, 2026
• CVE-2026-44694n8n-MCP: Authenticated SSRF in n8n-mcp webhook and API client paths9.1May 8, 2026
• CVE-2026-42282n8n-MCP: Sensitive MCP tool-call arguments logged on authenticated requests in HTTP mode4.3May 8, 2026
• CVE-2026-41495n8n-MCP Logs Sensitive Request Data on Unauthorized /mcp Requests5.3May 8, 2026
• GHSA-8g7g-hmwm-6rv2n8n-mcp affected by path traversal, redirect-following SSRF, and telemetry payload exposureMay 8, 2026
• CVE-2026-42449n8n-MCP: IPv4-mapped IPv6 addresses bypass SSRF protection in validateUrlSync(), enabling full SSRF for SDK embedders8.5May 7, 2026
• GHSA-75hx-xj24-mqrwn8n-mcp has unauthenticated session termination and information disclosure in HTTP transportApr 10, 2026
• CVE-2026-39974n8n-MCP has an Authenticated SSRF via instance-URL header in multi-tenant HTTP mode8.5Apr 9, 2026
• GHSA-4ggg-h7ph-26qrn8n-mcp has authenticated SSRF via instance-URL header in multi-tenant HTTP modeApr 8, 2026