medium4.2
CVE-2026-55608
n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations.
Impact
n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to 2.57.4, multi-tenant HTTP mode with ENABLE_MULTI_TENANT=true could allow an authenticated tenant to access default-scope workflow_versions backups instead of being confined to the tenant scope, exposing or deleting workflow-version backups from prior single-tenant deployments or migrations. This issue is fixed in version 2.57.4.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | n8n-mcp | <= 2.57.3 | 2.57.4 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| N8n-Mcp | N8n-Mcp | before 2.57.4 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/advisories/GHSA-2cf7-hpwf-47h9
- https://github.com/czlonkowski/n8n-mcp/security/advisories/GHSA-2cf7-hpwf-47h9
- https://github.com/czlonkowski/n8n-mcp/commit/c1ca1e73697feaec5ec2a5fb7e6992a2892b62c9
- https://github.com/czlonkowski/n8n-mcp/releases/tag/v2.57.4
- https://github.com/czlonkowski/n8n-mcp/commit/1f42899749ed0c584fb6b4fd63d75233c3edee59