{"id":"EUVD-2026-28825","enisaUuid":"31197da7-a409-39fb-8a3b-3cc29d3c60ad","description":"n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. From version 2.18.7 to before version 2.50.2, there is an authenticated server-side request forgery vulnerability affecting the webhook trigger tools, the n8n API client (N8N_API_URL), and per-request URLs supplied via the x-n8n-url header in multi-tenant HTTP mode. This issue has been patched in version 2.50.2.","datePublished":"May 8, 2026, 7:12:05 PM","dateUpdated":"May 12, 2026, 2:05:56 AM","baseScore":7.2,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L","references":"https://github.com/czlonkowski/n8n-mcp/security/advisories/GHSA-cmrh-wvq6-wm9r\nhttps://github.com/czlonkowski/n8n-mcp/commit/bcaba839409d470abeb4a6ad9b361b553a1098eb\nhttps://github.com/czlonkowski/n8n-mcp/releases/tag/v2.50.2\n","aliases":"CVE-2026-44694\nGHSA-cmrh-wvq6-wm9r\n","assigner":"GitHub_M","epss":0.24,"enisaIdProduct":[{"id":"a1445bd4-6834-32a2-8ca6-2683e2d75b58","product":{"name":"n8n-mcp","vendor":{"name":"czlonkowski"}},"product_version":"2.18.7, \u003c 2.50.2"}],"enisaIdVendor":[{"id":"bb67f4f1-ad99-3cce-a99b-5290846ec7fc","vendor":{"name":"czlonkowski"}}],"enisaIdVulnerability":[{"id":"2f3fd0a9-66bc-30d6-a2bc-880922147e76","vulnerability":{"id":"GHSA-cmrh-wvq6-wm9r","description":"n8n-mcp webhook and API client paths has an authenticated SSRF","datePublished":"May 8, 2026, 4:59:17 PM","dateUpdated":"May 13, 2026, 1:35:05 PM","baseScore":0.0,"references":"https://github.com/czlonkowski/n8n-mcp/security/advisories/GHSA-cmrh-wvq6-wm9r\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-44694\nhttps://github.com/czlonkowski/n8n-mcp/commit/bcaba839409d470abeb4a6ad9b361b553a1098eb\nhttps://github.com/czlonkowski/n8n-mcp\nhttps://github.com/czlonkowski/n8n-mcp/releases/tag/v2.50.2\n","enisa_id":"EUVD-2026-28825\n","aliases":"CVE-2026-44694\nGHSA-cmrh-wvq6-wm9r\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:00:21 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"88d6fb68-57ce-30d8-bc90-8e649d5e0bdc","vulnerability":{"id":"CVE-2026-44694","description":"n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. From version 2.18.7 to before version 2.50.2, there is an authenticated server-side request forgery vulnerability affecting the webhook trigger tools, the n8n API client (N8N_API_URL), and per-request URLs supplied via the x-n8n-url header in multi-tenant HTTP mode. This issue has been patched in version 2.50.2.","datePublished":"May 8, 2026, 7:12:05 PM","dateUpdated":"May 12, 2026, 2:05:56 AM","status":"PUBLISHED","baseScore":7.2,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L","references":"https://github.com/czlonkowski/n8n-mcp/security/advisories/GHSA-cmrh-wvq6-wm9r\nhttps://github.com/czlonkowski/n8n-mcp/commit/bcaba839409d470abeb4a6ad9b361b553a1098eb\nhttps://github.com/czlonkowski/n8n-mcp/releases/tag/v2.50.2\n","enisa_id":"EUVD-2026-28825\n","assigner":"GitHub_M","epss":0.24,"dataProcessed":"Nov 7, 2026, 7:21:46 AM","vulnerabilityProduct":[{"id":"0967be6a-d419-3553-b8d9-35414e07be1f","product":{"name":"n8n-mcp","vendor":{"name":"czlonkowski"}},"product_version":"2.18.7, \u003c 2.50.2"}],"vulnerabilityVendor":[{"id":"f5a5fa25-87c6-3926-8b5d-537b80d9d94f","vendor":{"name":"czlonkowski"}}]}}],"enisaIdAdvisory":[]}