CVE-2026-39974

{"id": "CVE-2026-39974", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-39974", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-13T20:09:16.284220Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 4.7, "exploitabilityScore": 3.1}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "czlonkowski", "product": "n8n-mcp", "versions": [{"status": "affected", "version": "< 2.47.4"}]}]}], "published": "2026-04-09T17:16:30.933", "references": [{"url": "https://github.com/czlonkowski/n8n-mcp/commit/d9d847f230923d96e0857ccecf3a4dedcc9b0096", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/czlonkowski/n8n-mcp/releases/tag/v2.47.4", "tags": ["Release Notes"], "source": "security-advisories@github.com"}, {"url": "https://github.com/czlonkowski/n8n-mcp/security/advisories/GHSA-4ggg-h7ph-26qr", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-918"}]}], "descriptions": [{"lang": "en", "value": "n8n-MCP is a Model Context Protocol (MCP) server that provides AI assistants with comprehensive access to n8n node documentation, properties, and operations. Prior to 2.47.4, an authenticated Server-Side Request Forgery in n8n-mcp allows a caller holding a valid AUTH_TOKEN to cause the server to issue HTTP requests to arbitrary URLs supplied through multi-tenant HTTP headers. Response bodies are reflected back through JSON-RPC, so an attacker can read the contents of any URL the server can reach \u2014 including cloud instance metadata endpoints (AWS IMDS, GCP, Azure, Alibaba, Oracle), internal network services, and any other host the server process has network access to. The primary at-risk deployments are multi-tenant HTTP installations where more than one operator can present a valid AUTH_TOKEN, or where a token is shared with less-trusted clients. Single-tenant stdio deployments and HTTP deployments without multi-tenant headers are not affected. This vulnerability is fixed in 2.47.4."}, {"lang": "es", "value": "n8n-MCP es un servidor de Protocolo de Contexto de Modelo (MCP) que proporciona a los asistentes de IA acceso completo a la documentaci\u00f3n, propiedades y operaciones de los nodos de n8n. Antes de la versi\u00f3n 2.47.4, una falsificaci\u00f3n de petici\u00f3n del lado del servidor autenticada en n8n-mcp permite a un llamador que posee un AUTH_TOKEN v\u00e1lido hacer que el servidor emita peticiones HTTP a URLs arbitrarias suministradas a trav\u00e9s de cabeceras HTTP multi-inquilino. Los cuerpos de respuesta se reflejan a trav\u00e9s de JSON-RPC, por lo que un atacante puede leer el contenido de cualquier URL a la que el servidor pueda acceder, incluyendo puntos finales de metadatos de instancias en la nube (AWS IMDS, GCP, Azure, Alibaba, Oracle), servicios de red internos y cualquier otro host al que el proceso del servidor tenga acceso de red. Las implementaciones principales en riesgo son las instalaciones HTTP multi-inquilino donde m\u00e1s de un operador puede presentar un AUTH_TOKEN v\u00e1lido, o donde un token se comparte con clientes menos confiables. Las implementaciones stdio de un solo inquilino y las implementaciones HTTP sin cabeceras multi-inquilino no se ven afectadas. Esta vulnerabilidad est\u00e1 corregida en la versi\u00f3n 2.47.4."}], "lastModified": "2026-10-26T21:10:00.170", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:n8n-mcp:n8n-mcp:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7CAAB9F8-4304-40CE-8A09-81BCE0D42741", "versionEndExcluding": "2.47.4"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}