CVE-2026-54052

Analyzed Analyzed - Analysis Complete

Information Disclosure in n8n-MCP Server

Publication date: 2026-07-15

Last updated on: 2026-07-18

Assigner: GitHub, Inc.

Description

n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to 2.56.1, in HTTP mode with multi-tenancy enabled through ENABLE_MULTI_TENANT=true, n8n-mcp's local workflow version history backups were not isolated per tenant, allowing an authenticated tenant to read workflow version snapshots belonging to other tenants and delete or destroy other tenants' stored backups, including full node definitions, credential references, and authorization headers. This issue is fixed in version 2.56.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-15

Last Modified

2026-07-18

Generated

2026-08-05

AI Q&A

2026-07-16

EPSS Evaluated

2026-08-03

NVD

CVE-2026-54052

Affected Vendors & Products

Vendor	Product	Version / Range
n8n-mcp	n8n-mcp	to 2.56.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-639	The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation and operations. Prior to version 2.56.1, when running in HTTP mode with multi-tenancy enabled, workflow version history backups were not properly isolated between tenants. This allowed an authenticated tenant to access, delete, or destroy backups belonging to other tenants, including sensitive data like node definitions, credential references, and authorization headers.

Detection Guidance

To detect this vulnerability, check if you are running n8n-MCP versions prior to 2.56.1 with multi-tenancy enabled via ENABLE_MULTI_TENANT=true. Verify if workflow version backups are accessible across tenants by inspecting backup storage locations and permissions.

Impact Analysis

This vulnerability allows an attacker with tenant access to steal sensitive workflow data, including credentials and authorization headers, from other tenants. They could also delete critical backups, disrupting operations and potentially causing data loss for other tenants.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR and HIPAA requirements for data protection and access controls. Organizations using affected versions may face compliance violations, legal penalties, and reputational damage.

Mitigation Strategies

Upgrade n8n-MCP to version 2.56.1 or later to address the vulnerability. Disable multi-tenancy if not required by setting ENABLE_MULTI_TENANT to false. Review and restrict access to workflow version backups to prevent unauthorized access.

Hi! I’m here to help you understand CVE-2026-54052. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70