Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to 2.57.4, multi-tenant HTTP mode with ENABLE_MULTI_TENANT=true could allow an authenticated tenant to access default-scope workflow_versions backups instead of being confined to the tenant scope, exposing or deleting workflow-version backups from prior single-tenant deployments or migrations. This issue is fixed in version 2.57.4.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-55608 Authenticated Tenant Scope Bypass in n8n-MCP Prior to Version 2.57.4 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-55608
Post summary
The post discloses CVE‑2026‑55608, noting an authenticated tenant scope bypass in n8n‑MCP before version 2.57.4, without mentioning PoC, exploitation, or patches.
🔵 n8n-MCP Incorrect Authorization Vulnerability (#CVE-2026-55608) -DC-Jul2026-975 https://dailycve.com/n8n-mcp-incorrect-authorization-vulnerability-cve-2026-55608-dc-jul2026-975/
Post summary
The post announces the disclosure of CVE‑2026‑55608, an incorrect‑authorization vulnerability in n8n‑MCP, without providing additional exploit or mitigation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | n8n-mcp | n8n-mcp | - | - | - |