{"action":"Upgrade n8n-mcp to 2.51.2 or later.","affected":[{"fixed":"2.51.2","introduced":"0"}],"component":"n8n-mcp","cve_ids":["CVE-2026-45707"],"ecosystem":"npm","epss":0.00235,"exploited":false,"fixed_versions":["2.51.2"],"ghsa_id":"GHSA-jxx9-px88-pj69","id":"tcs_01M5KFZ8X22EQCHVQJMSDJ9TW1","modified_at":"2026-06-09T10:45:16.351478055Z","published_at":"2026-05-18T17:41:42Z","references":["https://osv.dev/vulnerability/GHSA-jxx9-px88-pj69","https://github.com/czlonkowski/n8n-mcp/security/advisories/GHSA-jxx9-px88-pj69","https://nvd.nist.gov/vuln/detail/CVE-2026-45707","https://github.com/czlonkowski/n8n-mcp/commit/853015d0897be7cf2d9d4726de195c938e4395ab","https://github.com/czlonkowski/n8n-mcp","https://github.com/czlonkowski/n8n-mcp/releases/tag/v2.51.2"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-jxx9-px88-pj69","url":"https://osv.dev/vulnerability/GHSA-jxx9-px88-pj69"}],"summary":"n8n-MCP: Multi-tenant MCP requests fall back to process-level n8n credentials when tenant headers are absent or incomplete"}