Critical (AgentArmorHQ estimate)Data leakJuly 14, 2026

n8n-MCP: Cross-tenant access to workflow version backups in multi-tenant HTTP deployments

Product: n8n-MCP
CVE: CVE-2026-54052
Affected: n8n-mcp <= 2.56.0
Fixed in: 2.56.1

Last verified against sources: October 26, 2026

Am I affected?

n8n-MCP: affected n8n-mcp <= 2.56.0. Fixed in 2.56.1.

Check your version: run npm ls n8n-mcp. Versions <= 2.56.0 of n8n-mcp are affected. [1]

What to do now

Upgrade to the fixed version: run npm install n8n-mcp@2.56.1 (first patched version 2.56.1). [1]
Disable the workflow version tool by setting DISABLED_TOOLS=n8n_workflow_versions in the server environment. [1]
Do not run in multi-tenant mode — serve each tenant from a separate instance with its own database. [1]
Restrict network access to the HTTP endpoint to trusted operators. [1]

General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.

Discuss this incident

What happened

In multi-tenant HTTP deployments, the locally stored workflow version history was not isolated per tenant. [1]
An authenticated tenant could read workflow version snapshots belonging to other tenants. [1]
A stored snapshot includes full node definitions. [1]

Impact

An authenticated tenant could read workflow version snapshots belonging to other tenants. [1]
An authenticated tenant could delete or destroy other tenants' stored backups. [1]
The exposed data can contain credential references and authorization headers configured on nodes. [1]

What was done

The stored version history is now isolated per instance, so a tenant can only access its own backups. [1]
Upgrading runs a one-time migration that isolates existing history and clears previously stored, un-scoped backups. [1]
The patched version is 2.56.1. [1]

Sources

GHSA-j6r7-6fhx-77wx — GitHub Advisory Database

Every statement above was checked against these sources before publishing. Spotted an error? Tell us and we will correct it with a dated note.

Copy a plain-text summary for Slack, GitHub issues, or team security channels.

Brief

[CVE-2026-54052] n8n-MCP: Cross-tenant access to workflow version backups in multi-tenant HTTP deployments
Product: n8n-MCP | Affected: n8n-mcp <= 2.56.0 | Fixed in: 2.56.1
Summary: In multi-tenant HTTP deployments, the locally stored workflow version history was not isolated per tenant.
Source & remediation on AgentArmorHQ: https://agentarmorhq.com/incidents/2026/07/cve-2026-54052-n8n-mcp

Was this page useful?

Corrections

Report an error or request a correction. We review requests within 5 business days and add a dated correction note.

Discussions for CVE-2026-54052

Ask questions or share configuration tips. Governed by our Community Rules & Terms.

No posts match this filter yet.

Be the first to ask a question or share a working tip.

← All incidents Related tools in directory Check package