CVE-2026-41495

The record

n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to version 2.47.11, when n8n-mcp runs in HTTP transport mode, incoming requests to the POST /mcp endpoint had their request metadata written to server logs regardless of the authentication outcome. In deployments where logs are collected, forwarded to external systems, or viewable outside the request trust boundary (shared log storage, SIEM pipelines, support/ops access), this can result in disclosure of: bearer tokens from the Authorization header, per-tenant API keys from the, x-n8n-key header in multi-tenant setups, JSON-RPC request payloads sent to the MCP endpoint. Access control itself was not bypassed — unauthenticated requests were correctly rejected with 401 Unauthorized — but sensitive values from those rejected requests could still be persisted in logs. This issue has been patched in version 2.47.11.

Affected packages

Related vulnerabilities

• GHSA-pfm2-2mhg-8wpx n8n-MCP Logs Sensitive Request Data on Unauthorized /mcp Requests Same vulnerability
• CVE-2026-45707 n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation… Also affects n8n-mcp
• CVE-2026-45582 n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation… Also affects n8n-mcp
• GHSA-jxx9-px88-pj69 n8n-MCP: Multi-tenant MCP requests fall back to process-level n8n credentials when tenant… Also affects n8n-mcp
• GHSA-f3rg-xqjj-cj9w n8n-MCP: Workflow telemetry sanitizer could retain partial values from URL-shaped node… Also affects n8n-mcp
• CVE-2026-42282 n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation… Also affects n8n-mcp
• CVE-2026-44694 n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation… Also affects n8n-mcp
• GHSA-8g7g-hmwm-6rv2 n8n-mcp affected by path traversal, redirect-following SSRF, and telemetry payload… Also affects n8n-mcp