{"data":{"id":"8ba68a33-afe9-49c9-b1ae-9a7ab96267fe","title":"GHSA-f6x8-65q6-j9m9: n8n has Open Redirect in MCP OAuth Consent Flow","summary":"n8n's `/mcp-oauth/register` endpoint accepts OAuth client registrations without authentication, so arbitrary `redirect_uri` values can be registered. When a user clicks Deny on the MCP OAuth consent dialog, the `handleDeny` handler redirects them to that registered URI without validation, creating an open redirect. An attacker can send a phishing link that silently sends a victim to an external site after they deny consent.","solution":"Fixed in n8n 1.123.32, 2.17.4, and 2.18.1. Upgrade to one of these versions or later. If upgrading is not immediately possible, restrict network access to the n8n instance so untrusted users cannot reach the MCP OAuth endpoints, and limit access to fully trusted users only. The source states these workarounds do not fully remediate the risk and are short-term measures only.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-f6x8-65q6-j9m9","publishedAt":"2026-04-29T21:10:17.000Z","cveId":"CVE-2026-42230","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["n8n@>= 2.0.0, < 2.17.4 (fixed: 2.17.4)","n8n@>= 2.18.0, < 2.18.1 (fixed: 2.18.1)","n8n@< 1.123.32 (fixed: 1.123.32)"],"affectedPackageNames":["n8n"],"affectedPackageRefs":["npm:n8n"],"affectedVendors":[],"affectedVendorsRaw":["n8n","MCP"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00181,"epssCheckedAt":"2026-11-09T18:09:52.751Z","kevDateAdded":null,"advisoryAliases":["GHSA-f6x8-65q6-j9m9"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-04-29T21:10:17.000Z","fixReleasedAt":"2026-04-22T06:25:44.105Z","daysToFix":-7,"fixCheckedAt":"2026-10-29T21:37:14.832Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"n8n","fixedVersion":"1.123.32","matchedVersion":"1.123.32","fixReleasedAt":"2026-04-22T06:25:44.105Z","daysToFix":-7,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:37:14.685Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"2.18.1","matchedVersion":"2.18.1","fixReleasedAt":"2026-04-22T06:58:17.570Z","daysToFix":-7,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:37:14.685Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"2.17.4","matchedVersion":"2.17.4","fixReleasedAt":"2026-04-22T07:16:24.418Z","daysToFix":-7,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:37:14.685Z"}]}}