CVE-2026-54052 Details
Description
n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to 2.56.1, in HTTP mode with multi-tenancy enabled through ENABLE_MULTI_TENANT=true, n8n-mcp's local workflow version history backups were not isolated per tenant, allowing an authenticated tenant to read workflow version snapshots belonging to other tenants and delete or destroy other tenants' stored backups, including full node definitions, credential references, and authorization headers. This issue is fixed in version 2.56.1.
A vulnerability in n8n-MCP versions through 2.56.0 allows cross-tenant access to workflow version history backups in multi-tenant HTTP deployments. When multi-tenancy is enabled, the local workflow version backups were not isolated per tenant. This flaw enabled an authenticated tenant to read, delete, or destroy workflow version snapshots and backups belonging to other tenants. The exposed data could include full node definitions, credential references, and authorization headers, creating a confidentiality issue alongside integrity and availability concerns.
Users can upgrade to n8n-MCP version 2.56.1, which isolates stored workflow version history per tenant. If an immediate upgrade is not possible, the workflow version tool can be disabled for all tenants by setting 'DISABLED_TOOLS=n8n_workflow_versions' in the server environment. Alternatively, tenants can be served from separate instances with their own databases, or network access to the HTTP endpoint can be restricted to trusted operators.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 18, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/czlonkowski/n8n-mcp/releases/tag/v2.56.1 | [email protected] | Release Notes |
| https://github.com/czlonkowski/n8n-mcp/security/advisories/GHSA-j6r7-6fhx-77wx | [email protected] | MitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-639 | Authorization Bypass Through User-Controlled Key | [email protected] |
| CWE-862 | Missing Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| n8n-mcp n8n-mcp | < 2.56.1 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 18, 2026 | CVE Modified | CISA-ADP |
| Jul 17, 2026 | Initial Analysis | [email protected] |
| Jul 15, 2026 | New CVE Received | [email protected] |