Skip to content
Threat Feed
Subscribe

Tag

N8n-Mcp

3 briefs RSS
high advisory

n8n-mcp SDK Embedder SSRF Vulnerability via IPv6 Bypass

The n8n-mcp SDK embedder path is vulnerable to server-side request forgery (SSRF) due to the synchronous URL validator in `SSRFProtection.validateUrlSync()` not checking for IPv6 addresses, allowing attackers to access cloud metadata endpoints, RFC1918 private networks, or localhost services by supplying a crafted `n8nApiUrl`.

n8n-mcp ssrf cwe-918
2r 1t
high advisory

n8n-MCP Server-Side Request Forgery Vulnerability (CVE-2026-39974)

A server-side request forgery (SSRF) vulnerability in n8n-MCP prior to version 2.47.4 allows authenticated attackers to send HTTP requests to arbitrary URLs, potentially accessing sensitive information.

n8n-MCP Server ssrf n8n-mcp cve-2026-39974 cloud
2r 1t 1c
high advisory

n8n-mcp Unauthenticated Access and Information Disclosure Vulnerability

The n8n-mcp HTTP server had improper authentication in several endpoints, and the health check endpoint leaked sensitive metadata, allowing unauthenticated attackers with network access to disrupt MCP sessions and gather information for further attacks.

n8n-mcp unauthenticated access information disclosure network
2r 2t