CVE-2026-54052General(n8n-mcp / n8n-mcp)

LOWCVSS 9.9 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch n8n-mcp n8n-mcp systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to 2.56.1, in HTTP mode with multi-tenancy enabled through ENABLE_MULTI_TENANT=true, n8n-mcp's local workflow version history backups were not isolated per tenant, allowing an authenticated tenant to read workflow version snapshots belonging to other tenants and delete or destroy other tenants' stored backups, including full node definitions, credential references, and authorization headers. This issue is fixed in version 2.56.1.

n8n-mcp CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://github.com/czlonkowski/n8n-mcp/security/advisories/GHSA-j6r7-6fhx-77wx

Other references

https://github.com/czlonkowski/n8n-mcp/releases/tag/v2.56.1

Weakness type (CWE)

CWE-639CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

n8n-mcp

Threat summary

Patch or workaround signal is available
5 mentions across 5 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 4 signals
General: 2 classified signals
Disclosure: 1 classified signal
Peaked 4d ago at 1 mentions (2026-06-12); latest day: 1
5 total mentions across 5 days

Affected systems

Vendors

n8n-mcp

Products

n8n-mcp

Deep dive

Activity timeline5 mentions / 5d

Signal classification3 categories

General

240.0%

Patch

240.0%

Disclosure

120.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-12	1	General1
2026-07-14	1	Patch1
2026-07-15	1	Disclosure1
2026-07-18	1	General1
2026-07-21	1	Patch1

Full discourse5 posts

Wazuh@wazuh97d
Patch
n8n-mcp is affected by CVE-2026-54052 (CVSS 9.9 - Critical), a cross-tenant access flaw that can expose or delete workflow backups. Upgrade to 2.56.1 or set DISABLED_TOOLS=n8n_workflow_versions. Read more: https://ow.ly/G1VT50ZqKVx https://t.co/4z13rTuHX7
Post summary
CVE‑2026‑54052 is a critical cross‑tenant access flaw in n8n‑mcp that could expose or delete workflow backups; the vendor advises upgrading to version 2.56.1 or disabling the n8n_workflow_versions tool as a mitigation.
06072736
8.2K followersView on X
Security Arsenal, LLC@SecurityAr58409101d
General
🔒 #CyberSecurity CVE-2026-54052: Critical Remote Code Execution in MCP Servers — Detection and H… "As we navigate the complex landscape of AI integration in 2026, the Model Context…" 🔗 https://securityarsenal.com/blog/cve-2026-54052-critical-remote-code-execution-in-mcp-servers-detection-and-hardening-guide #CyberSecurity #ThreatIntel #cve202654052 #critical #cve
Post summary
The tweet announces CVE‑2026‑54052 as a critical RCE vulnerability in MCP servers and links to a detection and hardening guide, without providing any PoC, exploit code, or evidence of active exploitation.
0101166
19 followersView on X
DailyCVE@dailycve104d
Disclosure
🔴 n8n-MCP, Cross-Tenant Information Disclosure, #CVE-2026-54052 (Critical) -DC-Jul2026-968 https://dailycve.com/n8n-mcp-cross-tenant-information-disclosure-cve-2026-54052-critical-dc-jul2026-968/
Post summary
The post announces CVE‑2026‑54052 as a critical cross‑tenant information disclosure, providing only basic awareness without exploitation or mitigation details.
0000044
219 followersView on X
Upwind Security MDR@UpwindMDR104d
Patch
🚨 CVE-2026-54052 A critical authorization flaw in n8n-mcp allows authenticated tenants in multi-tenant HTTP mode (ENABLE_MULTI_TENANT=true) to read and delete workflow version backups belonging to other tenants. Affected versions: <= 2.56.0 The exposed snapshots may contain node definitions, credential references, and authorization headers. Recommendation: Upgrade to 2.56.1 immediately. If multi-tenant mode is enabled, review access logs and assess whether workflow version backups may have been accessed across tenant boundaries.
Post summary
A critical authorization flaw in n8n-mcp allows tenants to read and delete other tenants’ workflow backups; upgrading to 2.56.1 and reviewing access logs is recommended.
00000128
253 followersView on X
Ax Sharma@Ax_Sharma137d
General
@0xmagic0 @Manifold_ai_sec CVE-2026-54052 assigned to this critical vulnerability
Post summary
The tweet simply states that CVE‑2026‑54052 has been assigned as a critical vulnerability, without any additional technical detail, tooling, exploitation evidence, or mitigation advice.
0000068
5.3K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	n8n-mcp	n8n-mcp	-	-	-

Explore more

Back to dashboard n8n-mcp CVEs n8n-mcp vulnerabilities

What researchers are saying

CVE-2026-54052

Security Arsenal, LLC[verified]@SecurityAr58409General

The tweet announces CVE‑2026‑54052 as a critical RCE vulnerability in MCP servers and links to a detection and hardening guide, without providing any PoC, exploit code, or evidence of active exploitation.

Upwind Security MDR[verified]@UpwindMDRPatch

A critical authorization flaw in n8n-mcp allows tenants to read and delete other tenants’ workflow backups; upgrading to 2.56.1 and reviewing access logs is recommended.

Wazuh@wazuhPatch

CVE‑2026‑54052 is a critical cross‑tenant access flaw in n8n‑mcp that could expose or delete workflow backups; the vendor advises upgrading to version 2.56.1 or disabling the n8n_workflow_versions tool as a mitigation.

DailyCVE@dailycveDisclosure

The post announces CVE‑2026‑54052 as a critical cross‑tenant information disclosure, providing only basic awareness without exploitation or mitigation details.

Ax Sharma@Ax_SharmaGeneral

The tweet simply states that CVE‑2026‑54052 has been assigned as a critical vulnerability, without any additional technical detail, tooling, exploitation evidence, or mitigation advice.