GHSA-75hx-xj24-mqrw: N8n mcp N8n-mcp Has Unauthenticated Session Termination Vulnerability

Q: What is GHSA-75hx-xj24-mqrw?

GHSA-75hx-xj24-mqrw is a security vulnerability in N8n mcp involving n8n-mcp has unauthenticated session termination and information disclosure in HTTP transport under CWE-306: Missing Authentication for Critical Function.

Q: Which N8n mcp versions are affected?

Affected versions include releases prior to 2.47.6 across affected packages: n8n-mcp.

Q: What version fixes GHSA-75hx-xj24-mqrw?

Upgrading to 2.47.6 (or the latest patched release for your respective branch) resolves the vulnerability.

Q: Is n8n-mcp affected?

Yes, n8n-mcp is affected in releases prior to 2.47.6. Upgrade your dependency to 2.47.6 or later.

Q: What is the CVSS score of GHSA-75hx-xj24-mqrw?

GHSA-75hx-xj24-mqrw has a CVSS v3.1 base score of 8.2 (HIGH) with vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H.

Q: What CWE is associated with GHSA-75hx-xj24-mqrw?

GHSA-75hx-xj24-mqrw is classified under CWE-306: Missing Authentication for Critical Function (The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.).

Q: How can I check npm dependencies for GHSA-75hx-xj24-mqrw?

Run the dependency tree command: 'npm ls n8n-mcp'. This command lists direct and transitive dependencies in your build configuration so you can verify if a vulnerable version is resolved.

HIGH

CVSS 8.2

CWE-306

Published 2026-04-10

Advisory Summary

GHSA-75hx-xj24-mqrw is a HIGH (CVSS 8.2) n8n-mcp has unauthenticated session termination vulnerability (CWE-306: Missing Authentication for Critical Function) affecting N8n mcp libraries in the npm ecosystem. The issue involves n8n-mcp has unauthenticated session termination and information disclosure in http transport. Remediation is available by upgrading affected packages to version 2.47.6.

GHSA-75hx-xj24-mqrw at a Glance

CVE Identifier N/A

GHSA Identifier GHSA-75hx-xj24-mqrw

Severity HIGH

CVSS v3.1 Base Score 8.2

CWE Classification CWE-306: Missing Authentication for Critical Function

Affected Product N8n mcp

Package Ecosystem npm

Published Date 2026-04-10

Last Updated 2026-04-10

Security Impact

CVSS: 8.2

The security impact metrics below are parsed directly from the CVSS v3.1 vector string (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H).

Attack Vector Network (AV:N)

Attack Complexity Low (AC:L)

Privileges Required None (PR:N)

User Interaction None (UI:N)

Scope Unchanged (S:U)

Confidentiality Low (C:L)

Integrity None (I:N)

Availability High (A:H)

How to Fix GHSA-75hx-xj24-mqrw

To remediate this vulnerability, upgrade all affected N8n mcp dependencies to a patched release. Both direct and transitive dependencies should be checked, as frameworks or security libraries may pull in vulnerable versions transitively.

n8n-mcp fixed: 2.47.6

npm install n8n-mcp@2.47.6

Verify Direct and Transitive Dependencies

Run the following command in your project directory to verify that all resolved dependencies use the patched release:

npm ls n8n-mcp

How to Check if You Are Affected

To determine whether your Node.js application is affected by GHSA-75hx-xj24-mqrw, inspect your project dependencies using npm:

npm ls n8n-mcp

Analyze the terminal output to locate any version of N8n mcp in your dependency tree. If any resolved version matches the vulnerable ranges listed in the table below (for example, versions earlier than 2.47.6), your application is affected.

Note: The npm ls n8n-mcp command inspects dependencies declared in your package.json and lockfile; it does not perform automated runtime dynamic scanning.

Technical Details

Vulnerability Mechanism & Technical Analysis

This vulnerability is classified under CWE-306: Missing Authentication for Critical Function, where the product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. In N8n mcp, software state validation or input boundaries are circumvented during processing. Review the official source advisory statement below for specific affected components, classes, and reproduction details.

Source Advisory Statement

### Summary Several HTTP transport endpoints in n8n-mcp lacked proper authentication, and the health check endpoint exposed sensitive operational metadata without credentials. ### Impact An unauthenticated attacker with network access to the n8n-mcp HTTP server could disrupt active MCP sessions and gather information useful for further attacks. ### Patches Fixed in **v2.47.6**. All MCP session endpoints now require Bearer authentication. The health check endpoint has been reduced to a minimal liveness response. ### Workarounds If you cannot upgrade immediately: - **Restrict network access** to the HTTP server using firewall rules, reverse proxy IP allowlists, or a VPN so that only trusted clients can reach it. - **Use stdio mode** (`MCP_MODE=stdio`) instead of HTTP mode. The stdio transport does not expose any HTTP endpoints and is unaffected by this vulnerability. Upgrading to v2.47.6 is still strongly recommended. ### Credit Reported by @yotampe-pluto.

GHSA-75hx-xj24-mqrw Affected N8n mcp Versions

1 component(s)

Fixed Versions:

2.47.6

Product / Package	Ecosystem	Affected Versions	Fixed Version
n8n-mcp npm/n8n-mcp	npm	< 2.47.6	2.47.6

References

GitHub Advisory / Wiki ADVISORY

https://github.com/czlonkowski/n8n-mcp/security/advisories/GHSA-75hx-xj24-mqrw

Security Fix Commit FIX COMMIT

https://github.com/czlonkowski/n8n-mcp/commit/ca9d4b3df6419b8338983be98f7940400f78bde3

N8n mcp Source Repository REPOSITORY

https://github.com/czlonkowski/n8n-mcp

N8n mcp Release RELEASE

https://github.com/czlonkowski/n8n-mcp/releases/tag/v2.47.6

Frequently Asked Questions

What is GHSA-75hx-xj24-mqrw?

GHSA-75hx-xj24-mqrw is a security vulnerability in N8n mcp involving n8n-mcp has unauthenticated session termination and information disclosure in HTTP transport under CWE-306: Missing Authentication for Critical Function.

Which N8n mcp versions are affected?

Affected versions include releases prior to 2.47.6 across affected packages: n8n-mcp.

What version fixes GHSA-75hx-xj24-mqrw?

Upgrading to 2.47.6 (or the latest patched release for your respective branch) resolves the vulnerability.

Is n8n-mcp affected?

Yes, n8n-mcp is affected in releases prior to 2.47.6. Upgrade your dependency to 2.47.6 or later.

What is the CVSS score of GHSA-75hx-xj24-mqrw?

GHSA-75hx-xj24-mqrw has a CVSS v3.1 base score of 8.2 (HIGH) with vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H.

What CWE is associated with GHSA-75hx-xj24-mqrw?

GHSA-75hx-xj24-mqrw is classified under CWE-306: Missing Authentication for Critical Function (The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.).

How can I check npm dependencies for GHSA-75hx-xj24-mqrw?

Run the dependency tree command: 'npm ls n8n-mcp'. This command lists direct and transitive dependencies in your build configuration so you can verify if a vulnerable version is resolved.

Machine-readable OSV JSON OSV v1.5 Schema

Normalized schema output

View Raw JSON

{
  "schema_version" : "1.4.0",
  "id" : "GHSA-75hx-xj24-mqrw",
  "modified" : "2026-04-10T20:59:58Z",
  "published" : "2026-04-10T20:59:58Z",
  "aliases" : [ ],
  "summary" : "n8n-mcp has unauthenticated session termination and information disclosure in HTTP transport",
  "details" : "### Summary\n\nSeveral HTTP transport endpoints in n8n-mcp lacked proper authentication, and the health check endpoint exposed sensitive operational metadata without credentials.\n\n### Impact\n\nAn unauthenticated attacker with network access to the n8n-mcp HTTP server could disrupt active MCP sessions and gather information useful for further attacks.\n\n### Patches\n\nFixed in **v2.47.6**. All MCP session endpoints now require Bearer authentication. The health check endpoint has been reduced to a minimal liveness response.\n\n### Workarounds\n\nIf you cannot upgrade immediately:\n\n- **Restrict network access** to the HTTP server using firewall rules, reverse proxy IP allowlists, or a VPN so that only trusted clients can reach it.\n- **Use stdio mode** (`MCP_MODE=stdio`) instead of HTTP mode. The stdio transport does not expose any HTTP endpoints and is unaffected by this vulnerability.\n\nUpgrading to v2.47.6 is still strongly recommended.\n\n### Credit\n\nReported by @yotampe-pluto.",
  "severity" : [ {
    "type" : "CVSS_V3",
    "score" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H"
  } ],
  "affected" : [ {
    "package" : {
      "ecosystem" : "npm",
      "name" : "n8n-mcp"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "0"
      }, {
        "fixed" : "2.47.6"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 2.47.5"
    }
  } ],
  "references" : [ {
    "type" : "WEB",
    "url" : "https://github.com/czlonkowski/n8n-mcp/security/advisories/GHSA-75hx-xj24-mqrw"
  }, {
    "type" : "WEB",
    "url" : "https://github.com/czlonkowski/n8n-mcp/commit/ca9d4b3df6419b8338983be98f7940400f78bde3"
  }, {
    "type" : "PACKAGE",
    "url" : "https://github.com/czlonkowski/n8n-mcp"
  }, {
    "type" : "WEB",
    "url" : "https://github.com/czlonkowski/n8n-mcp/releases/tag/v2.47.6"
  } ],
  "database_specific" : {
    "cwe_ids" : [ "CWE-306" ],
    "severity" : "HIGH",
    "github_reviewed" : true,
    "github_reviewed_at" : "2026-04-10T20:59:58Z",
    "nvd_published_at" : null
  }
}

CVSS V3

8.2 HIGH