{"data":{"id":"1cbce343-29e2-4a88-9ae7-e402cfb588de","title":"GHSA-j6r7-6fhx-77wx: n8n-MCP: Cross-tenant access to workflow version backups in multi-tenant HTTP deployments","summary":"In multi-tenant HTTP deployments of n8n-mcp (ENABLE_MULTI_TENANT=true), the locally stored workflow version history was not isolated per tenant. An authenticated tenant could read other tenants' workflow version snapshots, which can include node credential references and authorization headers, and could delete their backups. Affected versions are <= 2.56.0; stdio and single-tenant HTTP deployments are not affected.","solution":"Fixed in 2.56.1, which isolates the stored version history per instance; upgrading runs a one-time migration that isolates existing history and clears previously stored, un-scoped backups. Workarounds: set DISABLED_TOOLS=n8n_workflow_versions in the server environment, run each tenant on a separate instance with its own database, or restrict network access to the HTTP endpoint to trusted operators.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-j6r7-6fhx-77wx","publishedAt":"2026-07-14T19:07:14.000Z","cveId":"CVE-2026-54052","cweIds":null,"cvssScore":null,"cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["n8n-mcp@<= 2.56.0 (fixed: 2.56.1)"],"affectedPackageNames":["n8n-mcp"],"affectedPackageRefs":["npm:n8n-mcp"],"affectedVendors":[],"affectedVendorsRaw":["n8n-MCP"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00388,"epssCheckedAt":"2026-10-14T00:06:45.166Z","kevDateAdded":null,"advisoryAliases":["GHSA-j6r7-6fhx-77wx"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-07-14T19:07:14.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}