MediumVulnerability
GHSA-2cf7-hpwf-47h9: n8n-MCP: Incorrect authorization can expose default-scope workflow version backups in multi-tenant HTTP mode
- Identifiers
- CVE-2026-55608GHSA-2cf7-hpwf-47h9
- Published
- Record updated
- Affected
- n8n-mcp <= 2.57.3
- Fixed in
- 2.57.4
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.3%
Summary
n8n-MCP versions up to and including 2.57.3, when run in multi-tenant HTTP mode (ENABLE_MULTI_TENANT=true), let an authenticated tenant reach the local default-scope workflow_versions backups instead of being confined to its own tenant scope. An attacker with tenant access can read or delete these backups, which may contain sensitive workflow configuration; single-tenant and stdio deployments are not affected.
Mitigation
Upgrade to n8n-mcp 2.57.4 or later. Workarounds: restrict network access to the HTTP endpoint (firewall, reverse proxy or VPN), run in stdio mode, or remove default-scope backups from a prior single-tenant deployment if they are not needed.