VulnSocial

CVE-2026-39974Disclosure(n8n-mcp / n8n-mcp)

LOWCVSS 8.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

n8n-MCP is a Model Context Protocol (MCP) server that provides AI assistants with comprehensive access to n8n node documentation, properties, and operations. Prior to 2.47.4, an authenticated Server-Side Request Forgery in n8n-mcp allows a caller holding a valid AUTH_TOKEN to cause the server to issue HTTP requests to arbitrary URLs supplied through multi-tenant HTTP headers. Response bodies are reflected back through JSON-RPC, so an attacker can read the contents of any URL the server can reach — including cloud instance metadata endpoints (AWS IMDS, GCP, Azure, Alibaba, Oracle), internal network services, and any other host the server process has network access to. The primary at-risk deployments are multi-tenant HTTP installations where more than one operator can present a valid AUTH_TOKEN, or where a token is shared with less-trusted clients. Single-tenant stdio deployments and HTTP deployments without multi-tenant headers are not affected. This vulnerability is fixed in 2.47.4.

n8n-mcp CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Patch / fix
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-918

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • n8n-mcp

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • 2 total mentions across 1 day

Affected systems

Vendors
n8n-mcp
Products
n8n-mcp

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-04-09: 2Technical Details · 2026-04-09: 104-09
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
Full discourse2 posts
  • CVEFind.com@CveFindCom
    Disclosure

    [CVE-2026-39974: HIGH] n8n-MCP server had a severe Server-Side Request Forgery vulnerability up to version 2.47.4, allowing attackers with valid AUTH_TOKEN to trigger HTTP requests to any URL via multi-tenan...#cve,CVE-2026-39974,#cybersecurity https://cvefind.com/CVE-2026-39974

    Post summary

    The post announces CVE-2026-39974, a severe SSRF vulnerability in n8n-MCP servers up to version 2.47.4 that allows attackers with a valid AUTH_TOKEN to send arbitrary HTTP requests. No PoC, exploit code, patch, or active exploitation details are provided.

    0001068
    619 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-39974 n8n-MCP is a Model Context Protocol (MCP) server that provides AI assistants with comprehensive access to n8n node documentation, properties, and operations. Prior to… https://www.cve.org/CVERecord?id=CVE-2026-39974

    Post summary

    The entry simply notes the existence of CVE‑2026‑39974, describes the affected component (n8n-MCP), and provides a link to the CVE record, without additional technical, exploit, or mitigation information.

    00000147
    57.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appn8n-mcpn8n-mcp---

Explore more

Back to dashboardn8n-mcp CVEsn8n-mcp vulnerabilities