Lucene search
+L

1 matches found

OSV
OSV
added 2026/04/25 11:35 p.m.13 views

GHSA-WG4G-395P-MQV3 n8n-MCP: Sensitive MCP tool-call arguments logged on authenticated requests in HTTP mode

Impact When n8n-mcp runs in HTTP transport mode, authenticated MCP tools/call requests had their full arguments and JSON-RPC params written to server logs by the request dispatcher and several sibling code paths before any redaction. When a tool call carries credential material — most notably...

4.3CVSS6AI score0.00251EPSS
SaveExploits0References5
Rows per page
Query Builder