CVE-2026-55608

Analyzed Analyzed - Analysis Complete

n8n-MCP Multi-Tenant Workflow Backup Exposure

Publication date: 2026-07-15

Last updated on: 2026-07-17

Assigner: GitHub, Inc.

Description

n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to 2.57.4, multi-tenant HTTP mode with ENABLE_MULTI_TENANT=true could allow an authenticated tenant to access default-scope workflow_versions backups instead of being confined to the tenant scope, exposing or deleting workflow-version backups from prior single-tenant deployments or migrations. This issue is fixed in version 2.57.4.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-15

Last Modified

2026-07-17

Generated

2026-08-05

AI Q&A

2026-07-16

EPSS Evaluated

2026-08-03

NVD

CVE-2026-55608

Affected Vendors & Products

Vendor	Product	Version / Range
n8n-mcp	n8n-mcp	to 2.57.4 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation and operations. A vulnerability exists in versions prior to 2.57.4 where multi-tenant HTTP mode with ENABLE_MULTI_TENANT=true allows an authenticated tenant to access workflow_versions backups outside their tenant scope. This could expose or delete backups from prior single-tenant deployments or migrations.

Detection Guidance

To detect this vulnerability, check if your n8n-MCP server is running in multi-tenant HTTP mode with ENABLE_MULTI_TENANT=true and version prior to 2.57.4. Verify if authenticated tenants can access workflow_versions backups outside their scope. Inspect server logs for unauthorized access attempts to backup files.

Impact Analysis

If you use n8n-MCP in multi-tenant HTTP mode with ENABLE_MULTI_TENANT=true, an attacker with tenant access could view or delete workflow backups from other tenants or previous deployments. This may lead to data leaks or loss of critical workflow data.

Compliance Impact

This vulnerability could violate GDPR or HIPAA by exposing sensitive workflow data to unauthorized tenants. GDPR requires protecting personal data, while HIPAA mandates safeguarding health information. Unauthorized access to backups may lead to compliance breaches, fines, or legal consequences.

Mitigation Strategies

Upgrade n8n-MCP to version 2.57.4 or later to address the multi-tenant scope issue. Ensure ENABLE_MULTI_TENANT is set correctly and verify tenant isolation for workflow_version backups.

Hi! I’m here to help you understand CVE-2026-55608. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70