1 matches found
GHSA-F6X8-65Q6-J9M9 n8n has Open Redirect in MCP OAuth Consent Flow
Impact The /mcp-oauth/register endpoint accepted OAuth client registrations without authentication, allowing arbitrary redirecturi values to be registered. When a user denies the MCP OAuth consent dialog, the handleDeny handler redirects the user to the registered redirecturi without validation,...
5.1CVSS5.9AI score0.00181EPSS
SaveExploits0References3
20