{"data":{"id":"1fde9d45-6846-4ec5-ae15-95073476b3ce","title":"GHSA-cmrh-wvq6-wm9r: n8n-mcp webhook and API client paths has an authenticated SSRF","summary":"Authenticated server-side request forgery in n8n-mcp affects the webhook trigger tools, the n8n API client via N8N_API_URL, and per-request URLs supplied in the x-n8n-url header in multi-tenant HTTP mode. A caller with an MCP session can make the n8n-mcp host send requests to internal services and cloud metadata endpoints, and the response body is returned to the caller. Fixed in n8n-mcp@2.50.2.","solution":"Fixed in `n8n-mcp@2.50.2`. Operators whose N8N_API_URL points at localhost or a private address should set WEBHOOK_SECURITY_MODE to moderate (allows localhost, still blocks RFC1918 and cloud metadata) or permissive (also allows RFC1918, only safe on a trusted private network); the default strict applies where n8n is on a public hostname. Workarounds for deployments that cannot upgrade: restrict network egress from the host and deny cloud metadata IPs (169.254.169.254, 169.254.170.2, 100.100.100.200, 192.0.0.192, and the GCP metadata.google.internal resolved IP) and RFC1918 networks; run in stdio mode instead of HTTP; or set DISABLED_TOOLS=n8n_trigger_webhook_workflow,n8n_create_workflow,n8n_test_workflow.","labels":["security","industry"],"sourceUrl":"https://github.com/advisories/GHSA-cmrh-wvq6-wm9r","publishedAt":"2026-05-08T16:59:17.000Z","cveId":"CVE-2026-44694","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["n8n-mcp@>= 2.18.7, < 2.50.2 (fixed: 2.50.2)"],"affectedPackageNames":["n8n-mcp"],"affectedPackageRefs":["npm:n8n-mcp"],"affectedVendors":[],"affectedVendorsRaw":["n8n-mcp","n8n"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00235,"epssCheckedAt":"2026-11-10T06:09:40.462Z","kevDateAdded":null,"advisoryAliases":["GHSA-cmrh-wvq6-wm9r"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-08T16:59:17.000Z","fixReleasedAt":"2026-05-04T09:36:09.712Z","daysToFix":-4,"fixCheckedAt":"2026-10-29T21:36:40.154Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"n8n-mcp","fixedVersion":"2.50.2","matchedVersion":"2.50.2","fixReleasedAt":"2026-05-04T09:36:09.712Z","daysToFix":-4,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:36:40.003Z"}]}}