CVE-2026-55608
1 advisory.
npm/n8n-mcp CVE-2026-55608: medium 4.2
n8n-MCP: Incorrect authorization can expose default-scope workflow version backups in multi-tenant HTTP mode
Action: Upgrade n8n-mcp to 2.57.4 or later.
npm i n8n-mcp@2.57.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.57.4 | - |
Fixed versions
| 2.57.4 |
Sources
- osv: GHSA-2cf7-hpwf-47h9
- https://github.com/czlonkowski/n8n-mcp/security/advisories/GHSA-2cf7-hpwf-47h9
- https://github.com/czlonkowski/n8n-mcp/commit/c1ca1e73697feaec5ec2a5fb7e6992a2892b62c9
- https://github.com/czlonkowski/n8n-mcp
- https://github.com/czlonkowski/n8n-mcp/releases/tag/v2.57.4
CVE-2026-55608 · published · modified · JSON