Lucene search
+L

1 matches found

OSV
OSV
added 2026/04/29 9:10 p.m.8 views

GHSA-F6X8-65Q6-J9M9 n8n has Open Redirect in MCP OAuth Consent Flow

Impact The /mcp-oauth/register endpoint accepted OAuth client registrations without authentication, allowing arbitrary redirecturi values to be registered. When a user denies the MCP OAuth consent dialog, the handleDeny handler redirects the user to the registered redirecturi without validation,...

5.1CVSS5.9AI score0.00181EPSS
SaveExploits0References3
Rows per page
Query Builder