Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. From version 2.18.7 to before version 2.50.2, there is an authenticated server-side request forgery vulnerability affecting the webhook trigger tools, the n8n API client (N8N_API_URL), and per-request URLs supplied via the x-n8n-url header in multi-tenant HTTP mode. This issue has been patched in version 2.50.2.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-44694 n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. From version 2.18.7 to before version 2.50.2, there… https://www.cve.org/CVERecord?id=CVE-2026-44694
Post summary
The text references CVE-2026-44694 with a short description of the affected component but does not provide any PoC, exploit details, active attack evidence, patch information, or technical specifics.
CVE-2026-44694 Authenticated Server-Side Request Forgery in n8n-MCP Versions 2.18.7 to 2.50.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-44694
Post summary
The post merely cites CVE‑2026‑44694 as an authenticated SSRF in n8n‑MCP 2.18.7‑2.50.1, without indicating any PoC, exploitation activity, patch, or mitigation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | n8n-mcp | n8n-mcp | - | - | - |