Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 01:40:01 +0000 CVE-2026-55608 — n8n-MCP: Incorrect authorization can expose default-scope workflow version backups in multi-tenant HTTP mode https://cve.radiocsirt.org/vuln/cve-2026-55608 <p><strong>Affected:</strong> czlonkowski n8n-mcp</p> <p>n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to 2.57.4, multi-tenant HTTP mode with ENABLE_MULTI_TENANT=true could allow an authenticated tenant to access default-scope workflow_versions backups instead of being confined to the tenant scope, exposing or deleting workflow-version backups from prior single-tenant deployments or migrations. This issue is fixed in version 2.57.4.</p> <p><strong>Affected:</strong> czlonkowski n8n-mcp</p> <p>n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to 2.57.4, multi-tenant HTTP mode with ENABLE_MULTI_TENANT=true could allow an authenticated tenant to access default-scope workflow_versions backups instead of being confined to the tenant scope, exposing or deleting workflow-version backups from prior single-tenant deployments or migrations. This issue is fixed in version 2.57.4.</p> https://cve.radiocsirt.org/vuln/cve-2026-55608