CVE-2026-54052
CriticalCVSS 9.9Exploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
In n8n-MCP prior to version 2.56.1, in HTTP mode with multi-tenancy enabled (ENABLE_MULTI_TENANT=true), local workflow version history backups were not isolated per tenant. This allowed an authenticated tenant to read and delete backups of other tenants, including full node definitions, credential references, and authorization headers.
Risk Assessment
The organization is at risk of confidential data leakage (node definitions, credentials, authorization headers) and loss of workflow backups belonging to other tenants, potentially compromising system integrity and confidentiality.
Recommendation
Immediately update n8n-MCP to version 2.56.1 or later. Until the update, consider disabling multi-tenancy (ENABLE_MULTI_TENANT=false) or restricting access to the MCP server.
Original NVD description (English source)
n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to 2.56.1, in HTTP mode with multi-tenancy enabled through ENABLE_MULTI_TENANT=true, n8n-mcp's local workflow version history backups were not isolated per tenant, allowing an authenticated tenant to read workflow version snapshots belonging to other tenants and delete or destroy other tenants' stored backups, including full node definitions, credential references, and authorization headers. This issue is fixed in version 2.56.1.