{"data":{"id":"7aa9c7c9-c63b-4ad7-aec2-54c0208a9e19","title":"GHSA-pfm2-2mhg-8wpx: n8n-MCP Logs Sensitive Request Data on Unauthorized /mcp Requests","summary":"Versions 2.47.10 and earlier of n8n-mcp, when run in HTTP transport mode, wrote request metadata for incoming POST /mcp requests to server logs even when authentication failed. Sensitive values from those rejected requests, including bearer tokens from the Authorization header, per-tenant x-n8n-key API keys, and JSON-RPC payloads, could therefore be persisted and exposed to anyone with access to collected logs. Access control itself was not bypassed, since unauthenticated requests received 401 Unauthorized, and the stdio transport is not affected.","solution":"Fixed in v2.47.11 (npm: npx n8n-mcp@latest or >= 2.47.11; Docker: ghcr.io/czlonkowski/n8n-mcp:latest). Workarounds: restrict network access to the HTTP port with a firewall, reverse proxy, or VPN, or switch to stdio transport (MCP_MODE=stdio).","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-pfm2-2mhg-8wpx","publishedAt":"2026-04-23T14:31:46.000Z","cveId":"CVE-2026-41495","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["n8n-mcp@< 2.47.11 (fixed: 2.47.11)"],"affectedPackageNames":["n8n-mcp"],"affectedPackageRefs":["npm:n8n-mcp"],"affectedVendors":[],"affectedVendorsRaw":["n8n-MCP"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00255,"epssCheckedAt":"2026-11-09T18:09:52.268Z","kevDateAdded":null,"advisoryAliases":["GHSA-pfm2-2mhg-8wpx"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-04-23T14:31:46.000Z","fixReleasedAt":"2026-04-16T20:49:20.424Z","daysToFix":-7,"fixCheckedAt":"2026-10-29T21:37:39.210Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"n8n-mcp","fixedVersion":"2.47.11","matchedVersion":"2.47.11","fixReleasedAt":"2026-04-16T20:49:20.424Z","daysToFix":-7,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:37:39.063Z"}]}}