{"data":{"id":"d850b6eb-974c-4e2c-afb7-ab1417ee082a","title":"GHSA-537j-gqpc-p7fq: n8n Vulnerable to XSS via MCP OAuth client","summary":"An unauthenticated attacker can register a malicious MCP OAuth client with a crafted client_name. When a second user revokes access after a victim authorized the OAuth consent dialog, a toast notification renders the injected script. Clicking the link runs arbitrary JavaScript in the victim's authenticated n8n browser session, enabling credential and session token theft, workflow manipulation, or privilege escalation.","solution":"Fixed in n8n version 2.14.2; users should upgrade to this version or later. Until then, administrators should consider restricting access to the n8n instance and the MCP OAuth registration endpoint to trusted users only, and disabling MCP server functionality if it is not actively required. The source states these workarounds do not fully remediate the risk and are only short-term measures.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-537j-gqpc-p7fq","publishedAt":"2026-04-29T21:23:04.000Z","cveId":"CVE-2026-42235","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["n8n@>= 2.17.0, < 2.17.4 (fixed: 2.17.4)","n8n@>= 2.18.0, < 2.18.1 (fixed: 2.18.1)","n8n@< 1.123.32 (fixed: 1.123.32)"],"affectedPackageNames":["n8n"],"affectedPackageRefs":["npm:n8n"],"affectedVendors":[],"affectedVendorsRaw":["n8n","MCP"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00332,"epssCheckedAt":"2026-11-10T00:11:23.986Z","kevDateAdded":null,"advisoryAliases":["GHSA-537j-gqpc-p7fq"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-04-29T21:23:04.000Z","fixReleasedAt":"2026-04-22T06:25:44.105Z","daysToFix":-7,"fixCheckedAt":"2026-10-29T21:37:11.789Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"n8n","fixedVersion":"2.18.1","matchedVersion":"2.18.1","fixReleasedAt":"2026-04-22T06:58:17.570Z","daysToFix":-7,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:37:11.642Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"2.17.4","matchedVersion":"2.17.4","fixReleasedAt":"2026-04-22T07:16:24.418Z","daysToFix":-7,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:37:11.642Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"1.123.32","matchedVersion":"1.123.32","fixReleasedAt":"2026-04-22T06:25:44.105Z","daysToFix":-7,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:37:11.642Z"}]}}