SCA: security update for n8n-mcp (GHSA-jxx9-px88-pj69)

high Tenable Cloud Security Plugin ID 442040

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and
operations. Prior to 2.51.2, when ENABLE_MULTI_TENANT=true, the HTTP transport documents that the target
n8n instance is selected per-request from x-n8n-url / x-n8n-key headers. Requests that omitted those
headers — or supplied only one of them — silently fell back to the process-level N8N_API_URL / N8N_API_KEY
credentials configured for the operator's own n8n instance. As a result, an authenticated MCP tenant could
cause n8n management calls to execute against the operator's instance instead of its own. This affects
HTTP-mode deployments of n8n-mcp that are run as a shared multi-tenant service. Single-tenant deployments
(ENABLE_MULTI_TENANT unset or false) are not affected. This vulnerability is fixed in 2.51.2.
(CVE-2026-45707)

Solution

Update the n8n-mcp library and its related packages to version 2.51.2 or later.

Plugin Details

Severity: High

ID: 442040

Version: Revision 1.5

Type: Local

Family: SCA Checks

Published: 5/18/2026

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.3

Percentile: 53.66

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: High

Base Score: 8.5

Temporal Score: 6.3

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:N

CVSS Score Source: CVE-2026-45707

CVSS v3

Risk Factor: High

Base Score: 8.1

Temporal Score: 7.1

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 5/18/2026

Vulnerability Publication Date: 5/18/2026

Reference Information

CVE: CVE-2026-45707

cwe: CWE-284

Detections

Analytics