CVE Explorer
CVE-2026-39974
n8n-MCP is a Model Context Protocol (MCP) server that provides AI assistants with comprehensive access to n8n node documentation, properties, and operations. Prior to 2.47.4, an authenticated Server-Side Request Forgery in n8n-mcp allows a caller holding a valid AUTH_TOKEN to cause the server to issue HTTP requests to arbitrary URLs supplied through multi-tenant HTTP headers. Response bodies are reflected back through JSON-RPC, so an attacker can read the contents of any URL the server can reach
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"product":"n8n-mcp","vendor":"czlonkowski","versions":[{"status":"affected","version":"< 2.47.4"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:33bfc1bc457c003a19d0a01826ac6ef298b85694aa9613aff887c3e799510bc2 · sha256:84bec43665795c7c… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N","version":"3.1"},"metric_type":"cvssV3_1"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:33bfc1bc457c003a19d0a01826ac6ef298b85694aa9613aff887c3e799510bc2 · sha256:84bec43665795c7c… · /containers/cna/metrics/0/cvssV3_1
CWE assertions
1 source assertion{"cweId":"CWE-918","description":"CWE-918: Server-Side Request Forgery (SSRF)","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:33bfc1bc457c003a19d0a01826ac6ef298b85694aa9613aff887c3e799510bc2 · sha256:84bec43665795c7c… · /containers/cna/problemTypes/0/descriptions/0
Source references
3 source assertions{"name":"https://github.com/czlonkowski/n8n-mcp/commit/d9d847f230923d96e0857ccecf3a4dedcc9b0096","tags":["x_refsource_MISC"],"url":"https://github.com/czlonkowski/n8n-mcp/commit/d9d847f230923d96e0857ccecf3a4dedcc9b0096"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:33bfc1bc457c003a19d0a01826ac6ef298b85694aa9613aff887c3e799510bc2 · sha256:84bec43665795c7c… · /containers/cna/references/1
{"name":"https://github.com/czlonkowski/n8n-mcp/releases/tag/v2.47.4","tags":["x_refsource_MISC"],"url":"https://github.com/czlonkowski/n8n-mcp/releases/tag/v2.47.4"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:33bfc1bc457c003a19d0a01826ac6ef298b85694aa9613aff887c3e799510bc2 · sha256:84bec43665795c7c… · /containers/cna/references/2
{"name":"https://github.com/czlonkowski/n8n-mcp/security/advisories/GHSA-4ggg-h7ph-26qr","tags":["x_refsource_CONFIRM"],"url":"https://github.com/czlonkowski/n8n-mcp/security/advisories/GHSA-4ggg-h7ph-26qr"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:33bfc1bc457c003a19d0a01826ac6ef298b85694aa9613aff887c3e799510bc2 · sha256:84bec43665795c7c… · /containers/cna/references/0
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.