CVE-2026-54052
1 advisory.
npm/n8n-mcp CVE-2026-54052: critical 9.9, EPSS 0.39%
n8n-MCP: Cross-tenant access to workflow version backups in multi-tenant HTTP deployments
Action: Upgrade n8n-mcp to 2.56.1 or later.
npm i n8n-mcp@2.56.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.56.1 | - |
Fixed versions
| 2.56.1 |
Sources
- osv: GHSA-j6r7-6fhx-77wx
- https://github.com/czlonkowski/n8n-mcp/security/advisories/GHSA-j6r7-6fhx-77wx
- https://github.com/czlonkowski/n8n-mcp
- https://github.com/czlonkowski/n8n-mcp/releases/tag/v2.56.1
CVE-2026-54052 · published · modified · JSON