CyberRota Analysis
AI-GeneratedThe n8n-MCP server, prior to version 2.56.1, is vulnerable in multi-tenant configurations where local workflow version history backups are not properly isolated, allowing authenticated users to access and manipulate other tenants' backups. This critical flaw could lead to unauthorized data exposure and potential loss of sensitive information, including node definitions and credentials. Organizations utilizing n8n-MCP in multi-tenant environments should prioritize upgrading to the latest version to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to 2.56.1, in HTTP mode with multi-tenancy enabled through ENABLE_MULTI_TENANT=true, n8n-mcp's local workflow version history backups were not isolated per tenant, allowing an authenticated tenant to read workflow version snapshots belonging to other tenants and delete or destroy other tenants' stored backups, including full node definitions, credential references, and authorization headers. This issue is fixed in version 2.56.1.
Related CVEs
Other vulnerabilities affecting the same vendor(s)