PT-2026-33891 · Npm · N8N-Mcp

Publicado 2026-04-10 · Atualizado 2026-04-10

OSV

CVSS v3.1

8.2

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Summary

Several HTTP transport endpoints in n8n-mcp lacked proper authentication, and the health check endpoint exposed sensitive operational metadata without credentials.

Impact

An unauthenticated attacker with network access to the n8n-mcp HTTP server could disrupt active MCP sessions and gather information useful for further attacks.

Patches

Fixed in v2.47.6. All MCP session endpoints now require Bearer authentication. The health check endpoint has been reduced to a minimal liveness response.

Workarounds

If you cannot upgrade immediately:

• Restrict network access to the HTTP server using firewall rules, reverse proxy IP allowlists, or a VPN so that only trusted clients can reach it.
• Use stdio mode (MCP MODE=stdio) instead of HTTP mode. The stdio transport does not expose any HTTP endpoints and is unaffected by this vulnerability.

Upgrading to v2.47.6 is still strongly recommended.

Credit

Reported by @yotampe-pluto.

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

GHSA-75HX-XJ24-MQRW

Produtos afetados

N8N-Mcp

Referências · 5

• https://github.com/czlonkowski/n8n-mcp · Nota
• https://github.com/czlonkowski/n8n-mcp/commit/ca9d4b3df6419b8338983be98f7940400f78bde3 · Nota
• https://github.com/czlonkowski/n8n-mcp/security/advisories/GHSA-75hx-xj24-mqrw · Nota
• https://github.com/czlonkowski/n8n-mcp/releases/tag/v2.47.6 · Nota
• https://osv.dev/vulnerability/GHSA-75hx-xj24-mqrw · Aviso do Fabricante