PT-2026-41690 · Czlonkowski+2 · N8N-Mcp

U-Ktdi · Published 2026-05-18 · Updated 2026-05-29 · CVE-2026-45582

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions n8n-MCP versions prior to 2.51.3

Description The workflow telemetry sanitizer may retain partial fragments of URL-shaped node parameters before transmitting workflow data to the anonymous telemetry backend. This allows values within HTTP-Request-style node parameters, such as tenant identifiers, short secrets in query strings, and signed request parameters, to be stored in telemetry. This issue is limited to URL-shaped fields in workflow definitions; credentials, OAuth tokens, and workflow execution data remain unaffected as they are handled by separate removal processes and dedicated patterns.

Recommendations Update to version 2.51.3. As a temporary workaround, disable anonymous telemetry by setting any of the following environment variables to true: N8N MCP TELEMETRY DISABLED, TELEMETRY DISABLED, or DISABLE TELEMETRY.

Fix

Weakness Enumeration

CWE-201

Related Identifiers

CVE-2026-45582

GHSA-F3RG-XQJJ-CJ9W

Affected Products

N8N-Mcp

References · 8

• https://github.com/czlonkowski/n8n-mcp/pull/782 · Patch
• https://github.com/czlonkowski/n8n-mcp/commit/6cf6fef653fcd6d598f2f356aac4754931c7329f · Patch
• https://github.com/czlonkowski/n8n-mcp/security/advisories/GHSA-f3rg-xqjj-cj9w · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-45582 · Security Note
• https://osv.dev/vulnerability/GHSA-f3rg-xqjj-cj9w · Vendor Advisory
• https://github.com/czlonkowski/n8n-mcp/releases/tag/v2.51.3 · Note
• https://github.com/czlonkowski/n8n-mcp · Note
• https://t.me/CVEtracker/55263 · Telegram Post