{"data":{"id":"0a2bc6cd-15ad-4368-9ed1-f016091d5642","title":"GHSA-8g7g-hmwm-6rv2: n8n-mcp affected by path traversal, redirect-following SSRF, and telemetry payload exposure","summary":"n8n-mcp versions before 2.50.1 contain three independently reported issues in deployments that use the n8n API integration. An authenticated MCP caller can supply crafted identifiers that the n8n API client uses as URL path segments, sending the configured n8n API key to other same-origin endpoints and bypassing handler-level controls including DISABLED_TOOLS. Validated webhook, form and chat trigger URLs also follow redirects, returning the response body to the caller, and default opt-in telemetry uploads unredacted operation payloads that can contain bearer tokens, API keys and webhook secrets. CVSS 8.3 (HIGH); exploitation requires an authenticated MCP caller and a configured n8n API key.","solution":"Upgrade to n8n-mcp >= 2.50.1. Workarounds: for the first two issues, restrict network access to the HTTP transport (firewall, reverse-proxy ACL or VPN) or switch to stdio mode; for the telemetry issue, set N8N_MCP_TELEMETRY_DISABLED=true before starting the server or run `npx n8n-mcp telemetry disable` once.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-8g7g-hmwm-6rv2","publishedAt":"2026-05-08T17:00:09.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["n8n-mcp@< 2.50.1 (fixed: 2.50.1)"],"affectedPackageNames":["n8n-mcp"],"affectedPackageRefs":["npm:n8n-mcp"],"affectedVendors":[],"affectedVendorsRaw":["n8n-mcp","n8n"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-8g7g-hmwm-6rv2"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-08T17:00:09.000Z","fixReleasedAt":"2026-05-04T08:06:20.997Z","daysToFix":-4,"fixCheckedAt":"2026-10-29T21:36:39.410Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"n8n-mcp","fixedVersion":"2.50.1","matchedVersion":"2.50.1","fixReleasedAt":"2026-05-04T08:06:20.997Z","daysToFix":-4,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:36:39.262Z"}]}}