FR
live
Critical CVSS 9.9

CVE-2026-54052

N8n-mcp

n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to 2.56.1, in HTTP mode with multi-tenancy enabled through ENABLE_MULTI_TENANT=true, n8n-mcp's local workflow version history backups were not isolated per tenant, allowing an authenticated tenant to read workflow version snapshots belonging to other tenants and delete or destroy other tenants' stored backups, including full node definitions, credential references, and authorization headers. This issue is fixed in version 2.56.1.

What this means

Exposure
Exploitable remotely over the network, with an ordinary user account and with no action from the victim.
Impact
An attacker can read sensitive data, modify or destroy data and degrade the service. The impact spreads beyond the vulnerable component into other parts of the system.
Weakness
Changing an identifier in the request grants access to another user’s data.
Likelihood
Its EPSS score stays low: nothing points to imminent exploitation, which is no reason to leave it unpatched.

What to doPatch without waiting for the next scheduled cycle.

Read automatically from the CVSS vector, the weakness type (CWE) and the EPSS score. The technical description above remains the one published by NIST.

Published
15 July 2026
CVSS
9.9 (v3.1) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
EPSS
0.23% probability of exploitation within 30 days · above 14% of all CVEs
Weakness
CWE-639CWE-862
Sources
nvd
References

Type at least two characters.

navigate open esc dismiss