CVE-2026-42282

{
  "id": "CVE-2026-42282",
  "sourceIdentifier": "[email protected]",
  "published": "2026-05-08T20:16:31.717",
  "lastModified": "2026-10-26T18:10:00.173",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to version 2.47.13, when n8n-mcp runs in HTTP transport mode, authenticated MCP tools/call requests had their full arguments and JSON-RPC params written to server logs by the request dispatcher and several sibling code paths before any redaction. When a tool call carries credential material — most notably n8n_manage_credentials.data — the raw values can be persisted in logs. In deployments where logs are collected, forwarded to external systems, or viewable outside the request trust boundary (shared log storage, SIEM pipelines, support/ops access), this can result in disclosure of: bearer tokens and OAuth credentials sent through n8n_manage_credentials, per-tenant API keys and webhook auth headers embedded in tool arguments, arbitrary secret-bearing payloads passed to any MCP tool. The issue requires authentication (AUTH_TOKEN accepted by the server), so unauthenticated callers cannot trigger it; the runtime exposure is also reduced by an existing console-silencing layer in HTTP mode, but that layer is fragile and the values are still constructed and passed into the logger. This issue has been patched in version 2.47.13."
    },
    {
      "lang": "es",
      "value": "n8n-MCP es un servidor MCP que proporciona a los asistentes de IA acceso a la documentación, propiedades y operaciones de los nodos n8n. Antes de la versión 2.47.13, cuando n8n-mcp se ejecuta en modo de transporte HTTP, las solicitudes de herramientas/llamadas MCP autenticadas tenían sus argumentos completos y parámetros JSON-RPC escritos en los registros del servidor por el despachador de solicitudes y varias rutas de código hermanas antes de cualquier redacción. Cuando una llamada de herramienta lleva material de credenciales - más notablemente n8n_manage_credentials.data - los valores sin procesar pueden persistir en los registros. En implementaciones donde los registros se recopilan, se reenvían a sistemas externos o son visibles fuera del límite de confianza de la solicitud (almacenamiento de registros compartido, pipelines SIEM, acceso de soporte/operaciones), esto puede resultar en la divulgación de: tokens de portador y credenciales OAuth enviados a través de n8n_manage_credentials, claves API por inquilino y encabezados de autenticación de webhook incrustados en los argumentos de la herramienta, cargas útiles arbitrarias que contienen secretos pasadas a cualquier herramienta MCP. El problema requiere autenticación (AUTH_TOKEN aceptado por el servidor), por lo que los llamadores no autenticados no pueden activarlo; la exposición en tiempo de ejecución también se reduce por una capa existente de silenciamiento de consola en modo HTTP, pero esa capa es frágil y los valores aún se construyen y se pasan al registrador. Este problema ha sido parcheado en la versión 2.47.13."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "czlonkowski",
          "product": "n8n-mcp",
          "versions": [
            {
              "version": "< 2.47.13",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "baseScore": 4.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 1.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-05-12T12:47:00.245015Z",
          "id": "CVE-2026-42282",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-532"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:n8n-mcp:n8n-mcp:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2.47.13",
              "matchCriteriaId": "269D196F-2215-4B5B-B3F7-B9A2A7E0CE71"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/czlonkowski/n8n-mcp/commit/59b665bda36797823df238aeaf20adb862c9f451",
      "source": "[email protected]",
      "tags": [
        "Patch"
      ]
    },
    {
      "url": "https://github.com/czlonkowski/n8n-mcp/releases/tag/v2.47.13",
      "source": "[email protected]",
      "tags": [
        "Product",
        "Release Notes"
      ]
    },
    {
      "url": "https://github.com/czlonkowski/n8n-mcp/security/advisories/GHSA-wg4g-395p-mqv3",
      "source": "[email protected]",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ]
    }
  ]
}