Lucene search
+L

30 matches found

OSV
OSV
added 2026/05/08 7:12 p.m.4 views

CVE-2026-44694 n8n-MCP: Authenticated SSRF in n8n-mcp webhook and API client paths

n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. From version 2.18.7 to before version 2.50.2, there is an authenticated server-side request forgery vulnerability affecting the webhook trigger tools, the n8n API client N8NAPIURL, a...

7.2CVSS5.9AI score0.00235EPSS
SaveExploits0References5
Rows per page
Query Builder