CVE-2026-44694 Details
Description
n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. From version 2.18.7 to before version 2.50.2, there is an authenticated server-side request forgery vulnerability affecting the webhook trigger tools, the n8n API client (N8N_API_URL), and per-request URLs supplied via the x-n8n-url header in multi-tenant HTTP mode. This issue has been patched in version 2.50.2.
A vulnerability allowing authenticated server-side request forgery (SSRF) has been identified in n8n-MCP versions 2.18.7 prior to 2.50.2. This vulnerability affects the webhook trigger tools, the n8n API client (N8N_API_URL), and per-request URLs supplied via the x-n8n-url header in multi-tenant HTTP mode. The issue arises because the SSRF gate, which is supposed to block access to internal services and cloud metadata endpoints, can be bypassed, allowing a caller with access to the MCP session to drive HTTP requests from the n8n-MCP host to these restricted areas.
Upgrade to n8n-MCP version 2.50.2 or later. After upgrading, if running n8n on the same host as n8n-MCP, set the WEBHOOK_SECURITY_MODE to moderate to allow localhost while blocking private networks and cloud metadata.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 12, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/czlonkowski/n8n-mcp/commit/bcaba839409d470abeb4a6ad9b361b553a1098eb | [email protected] | Patch |
| https://github.com/czlonkowski/n8n-mcp/releases/tag/v2.50.2 | [email protected] | ProductRelease Notes |
| https://github.com/czlonkowski/n8n-mcp/security/advisories/GHSA-cmrh-wvq6-wm9r | [email protected] | MitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-367 | Time-of-check Time-of-use (TOCTOU) Race Condition | [email protected] |
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| n8n-mcp n8n-mcp | >= 2.18.7, < 2.50.2 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 14, 2026 | Initial Analysis | [email protected] |
| May 8, 2026 | New CVE Received | [email protected] |