CVE Feed

    Dashboard / CVE / CVE-2026-54052

    CVE-2026-54052

    n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to 2.56.1, in HTTP mode with multi-tenancy enabled through ENABLE_MULTI_TENANT=true, n8n-mcp's local workflow version history backups were not isolated per tenant, allowing an authenticated tenant to read workflow version snapshots belonging to other tenants and delete or destroy other tenants' stored backups, including full node definitions, credential references, and authorization headers. This issue is fixed in version 2.56.1.

    Published:Jul 15, 2026
    Last Modified:Jul 18, 2026
    EPS:Jul 15, 2026
    EPSS Score:0.00389
    CVSS Score:9.9

    Affected Products

    Vendor
    Czlonkowski
    Product
    N8n-mcp

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-665 Exploitation of Thunderbolt Protection Flaws

    Related CVEs

    CVE-2026-55608 (CVSS 4.2) — n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operati…
    CVE-2026-45582 (CVSS 6.5) — n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operati…
    CVE-2026-45707 (CVSS 8.1) — n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operati…
    CVE-2026-44694 (CVSS 7.2) — n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operati…
    CVE-2026-42282 (CVSS 4.3) — n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operati…
    CVE-2026-41495 (CVSS 5.3) — n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operati…
    CVE-2026-42449 (CVSS 8.5) — n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operati…
    CVE-2026-39974 (CVSS 8.5) — n8n-MCP is a Model Context Protocol (MCP) server that provides AI assistants with comprehensive access to n8n …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High