{"data":{"id":"76fa323e-5dfb-49b6-ba0e-1ff4359b4f03","title":"GHSA-qrx8-25qr-5r7v: n8n: MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions","summary":"When @n8n/mcp-browser runs in HTTP transport mode (--transport http), its MCP endpoint accepts session initialization and tool calls with no authentication. Any network-reachable client, or any website the user visits, can open an MCP session and invoke browser-control tools. Where the n8n AI Browser Bridge extension is installed and a browser connection is active, the attacker gets navigation, JavaScript evaluation, and cookie and storage access against the user's real browser profile. The default stdio transport is not affected.","solution":"The issue has been fixed in n8n versions 2.25.7 and 2.26.2; upgrade to one of these or later. Temporary workarounds: avoid HTTP transport and use the default stdio transport instead, or if HTTP is required, restrict network access to the listening port to trusted clients using host-based firewall rules. The source states these workarounds do not fully remediate the risk and are short-term measures only.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-qrx8-25qr-5r7v","publishedAt":"2026-06-16T23:32:31.000Z","cveId":"CVE-2026-54309","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["n8n@< 2.25.7 (fixed: 2.25.7)","n8n@>= 2.26.0, < 2.26.2 (fixed: 2.26.2)"],"affectedPackageNames":["n8n"],"affectedPackageRefs":["npm:n8n"],"affectedVendors":[],"affectedVendorsRaw":["n8n","@n8n/mcp-browser","n8n AI Browser Bridge"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00546,"epssCheckedAt":"2026-11-05T06:10:15.115Z","kevDateAdded":null,"advisoryAliases":["GHSA-qrx8-25qr-5r7v"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-06-16T23:32:31.000Z","fixReleasedAt":"2026-06-10T08:43:36.967Z","daysToFix":-6,"fixCheckedAt":"2026-10-29T21:34:26.413Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"n8n","fixedVersion":"2.26.2","matchedVersion":"2.26.2","fixReleasedAt":"2026-06-10T08:43:36.967Z","daysToFix":-6,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:34:26.264Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"2.25.7","matchedVersion":"2.25.7","fixReleasedAt":"2026-06-10T08:45:26.303Z","daysToFix":-6,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:34:26.264Z"}]}}