{"data":{"id":"a56046fe-0bc2-4e81-977e-445ebc95f647","title":"GHSA-wg4g-395p-mqv3: n8n-MCP: Sensitive MCP tool-call arguments logged on authenticated requests in HTTP mode","summary":"In HTTP transport mode, n8n-mcp versions v2.47.12 and earlier wrote full MCP tools/call arguments and JSON-RPC params to server logs for authenticated requests, before redaction. When a call carried credentials, such as through n8n_manage_credentials.data, the raw values could be persisted in logs, exposing bearer tokens, OAuth credentials, API keys and webhook auth headers to anyone with access to collected or forwarded logs. The issue requires a valid AUTH_TOKEN, and the stdio transport is not affected in practice.","solution":"Fixed in v2.47.13 (npm: npx n8n-mcp@latest or >= 2.47.13; Docker: ghcr.io/czlonkowski/n8n-mcp:latest). Interim workarounds: restrict access to the HTTP port, restrict access to server logs, or switch to stdio transport (MCP_MODE=stdio).","labels":["security","privacy"],"sourceUrl":"https://github.com/advisories/GHSA-wg4g-395p-mqv3","publishedAt":"2026-04-25T23:35:28.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["pii_leakage"],"issueType":"vulnerability","affectedPackages":["n8n-mcp@< 2.47.13 (fixed: 2.47.13)"],"affectedPackageNames":["n8n-mcp"],"affectedPackageRefs":["npm:n8n-mcp"],"affectedVendors":[],"affectedVendorsRaw":["n8n-MCP","n8n"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-wg4g-395p-mqv3"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-04-25T23:35:28.000Z","fixReleasedAt":"2026-04-20T21:45:30.150Z","daysToFix":-5,"fixCheckedAt":"2026-10-29T21:37:17.073Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"n8n-mcp","fixedVersion":"2.47.13","matchedVersion":"2.47.13","fixReleasedAt":"2026-04-20T21:45:30.150Z","daysToFix":-5,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:37:16.920Z"}]}}