Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 20:09:37 +0000 CVE-2026-44694 — n8n-MCP: Authenticated SSRF in n8n-mcp webhook and API client paths https://cve.radiocsirt.org/vuln/cve-2026-44694 <p><strong>Affected:</strong> czlonkowski n8n-mcp</p> <p>n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. From version 2.18.7 to before version 2.50.2, there is an authenticated server-side request forgery vulnerability affecting the webhook trigger tools, the n8n API client (N8N_API_URL), and per-request URLs supplied via the x-n8n-url header in multi-tenant HTTP mode. This issue has been patched in version 2.50.2.</p> <p><strong>Affected:</strong> czlonkowski n8n-mcp</p> <p>n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. From version 2.18.7 to before version 2.50.2, there is an authenticated server-side request forgery vulnerability affecting the webhook trigger tools, the n8n API client (N8N_API_URL), and per-request URLs supplied via the x-n8n-url header in multi-tenant HTTP mode. This issue has been patched in version 2.50.2.</p> https://cve.radiocsirt.org/vuln/cve-2026-44694