SEPTEMBER 9, 2026
Live Feed
Back to database
Case File

CVE-2026-54052

CRITICAL · CVSS 9.9 EPSS 0.23% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-15 · Last synced 2026-08-14

CyberRota Analysis

AI-Generated

The n8n-MCP server, prior to version 2.56.1, is vulnerable in multi-tenant configurations where local workflow version history backups are not properly isolated, allowing authenticated users to access and manipulate other tenants' backups. This critical flaw could lead to unauthorized data exposure and potential loss of sensitive information, including node definitions and credentials. Organizations utilizing n8n-MCP in multi-tenant environments should prioritize upgrading to the latest version to mitigate these risks.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-54052
Severity
CRITICAL
CVSS
9.9
EPSS
0.23%

Original NVD Description

n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to 2.56.1, in HTTP mode with multi-tenancy enabled through ENABLE_MULTI_TENANT=true, n8n-mcp's local workflow version history backups were not isolated per tenant, allowing an authenticated tenant to read workflow version snapshots belonging to other tenants and delete or destroy other tenants' stored backups, including full node definitions, credential references, and authorization headers. This issue is fixed in version 2.56.1.

Related CVEs

Other vulnerabilities affecting the same vendor(s)