CVE-2026-42282

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-42282", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-04-26T12:13:55.550Z", "datePublished": "2026-05-08T19:07:13.823Z", "dateUpdated": "2026-05-12T18:32:11.186Z"}, "containers": {"cna": {"title": "n8n-MCP: Sensitive MCP tool-call arguments logged on authenticated requests in HTTP mode", "problemTypes": [{"descriptions": [{"cweId": "CWE-532", "lang": "en", "description": "CWE-532: Insertion of Sensitive Information into Log File", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/czlonkowski/n8n-mcp/security/advisories/GHSA-wg4g-395p-mqv3", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/czlonkowski/n8n-mcp/security/advisories/GHSA-wg4g-395p-mqv3"}, {"name": "https://github.com/czlonkowski/n8n-mcp/commit/59b665bda36797823df238aeaf20adb862c9f451", "tags": ["x_refsource_MISC"], "url": "https://github.com/czlonkowski/n8n-mcp/commit/59b665bda36797823df238aeaf20adb862c9f451"}, {"name": "https://github.com/czlonkowski/n8n-mcp/releases/tag/v2.47.13", "tags": ["x_refsource_MISC"], "url": "https://github.com/czlonkowski/n8n-mcp/releases/tag/v2.47.13"}], "affected": [{"vendor": "czlonkowski", "product": "n8n-mcp", "versions": [{"version": "< 2.47.13", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-05-08T19:07:13.823Z"}, "descriptions": [{"lang": "en", "value": "n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to version 2.47.13, when n8n-mcp runs in HTTP transport mode, authenticated MCP tools/call requests had their full arguments and JSON-RPC params written to server logs by the request dispatcher and several sibling code paths before any redaction. When a tool call carries credential material \u2014 most notably n8n_manage_credentials.data \u2014 the raw values can be persisted in logs. In deployments where logs are collected, forwarded to external systems, or viewable outside the request trust boundary (shared log storage, SIEM pipelines, support/ops access), this can result in disclosure of: bearer tokens and OAuth credentials sent through n8n_manage_credentials, per-tenant API keys and webhook auth headers embedded in tool arguments, arbitrary secret-bearing payloads passed to any MCP tool. The issue requires authentication (AUTH_TOKEN accepted by the server), so unauthenticated callers cannot trigger it; the runtime exposure is also reduced by an existing console-silencing layer in HTTP mode, but that layer is fragile and the values are still constructed and passed into the logger. This issue has been patched in version 2.47.13."}], "source": {"advisory": "GHSA-wg4g-395p-mqv3", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-12T12:47:00.245015Z", "id": "CVE-2026-42282", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-12T18:32:11.186Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-42282", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-12T12:47:00.245015Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-12T12:47:05.300Z"}}], "cna": {"title": "n8n-MCP: Sensitive MCP tool-call arguments logged on authenticated requests in HTTP mode", "source": {"advisory": "GHSA-wg4g-395p-mqv3", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "czlonkowski", "product": "n8n-mcp", "versions": [{"status": "affected", "version": "< 2.47.13"}]}], "references": [{"url": "https://github.com/czlonkowski/n8n-mcp/security/advisories/GHSA-wg4g-395p-mqv3", "name": "https://github.com/czlonkowski/n8n-mcp/security/advisories/GHSA-wg4g-395p-mqv3", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/czlonkowski/n8n-mcp/commit/59b665bda36797823df238aeaf20adb862c9f451", "name": "https://github.com/czlonkowski/n8n-mcp/commit/59b665bda36797823df238aeaf20adb862c9f451", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/czlonkowski/n8n-mcp/releases/tag/v2.47.13", "name": "https://github.com/czlonkowski/n8n-mcp/releases/tag/v2.47.13", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to version 2.47.13, when n8n-mcp runs in HTTP transport mode, authenticated MCP tools/call requests had their full arguments and JSON-RPC params written to server logs by the request dispatcher and several sibling code paths before any redaction. When a tool call carries credential material \u2014 most notably n8n_manage_credentials.data \u2014 the raw values can be persisted in logs. In deployments where logs are collected, forwarded to external systems, or viewable outside the request trust boundary (shared log storage, SIEM pipelines, support/ops access), this can result in disclosure of: bearer tokens and OAuth credentials sent through n8n_manage_credentials, per-tenant API keys and webhook auth headers embedded in tool arguments, arbitrary secret-bearing payloads passed to any MCP tool. The issue requires authentication (AUTH_TOKEN accepted by the server), so unauthenticated callers cannot trigger it; the runtime exposure is also reduced by an existing console-silencing layer in HTTP mode, but that layer is fragile and the values are still constructed and passed into the logger. This issue has been patched in version 2.47.13."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-532", "description": "CWE-532: Insertion of Sensitive Information into Log File"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-05-08T19:07:13.823Z"}}}, "cveMetadata": {"cveId": "CVE-2026-42282", "state": "PUBLISHED", "dateUpdated": "2026-05-12T18:32:11.186Z", "dateReserved": "2026-04-26T12:13:55.550Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-05-08T19:07:13.823Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "n8n-mcp", "vendor": "czlonkowski", "versions": [{"status": "affected", "version": "< 2.47.13"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:n8n-mcp:n8n-mcp:*:*:*:*:*:*:*:*", "matchCriteriaId": "269D196F-2215-4B5B-B3F7-B9A2A7E0CE71", "versionEndExcluding": "2.47.13", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to version 2.47.13, when n8n-mcp runs in HTTP transport mode, authenticated MCP tools/call requests had their full arguments and JSON-RPC params written to server logs by the request dispatcher and several sibling code paths before any redaction. When a tool call carries credential material \u2014 most notably n8n_manage_credentials.data \u2014 the raw values can be persisted in logs. In deployments where logs are collected, forwarded to external systems, or viewable outside the request trust boundary (shared log storage, SIEM pipelines, support/ops access), this can result in disclosure of: bearer tokens and OAuth credentials sent through n8n_manage_credentials, per-tenant API keys and webhook auth headers embedded in tool arguments, arbitrary secret-bearing payloads passed to any MCP tool. The issue requires authentication (AUTH_TOKEN accepted by the server), so unauthenticated callers cannot trigger it; the runtime exposure is also reduced by an existing console-silencing layer in HTTP mode, but that layer is fragile and the values are still constructed and passed into the logger. This issue has been patched in version 2.47.13."}, {"lang": "es", "value": "n8n-MCP es un servidor MCP que proporciona a los asistentes de IA acceso a la documentaci\u00f3n, propiedades y operaciones de los nodos n8n. Antes de la versi\u00f3n 2.47.13, cuando n8n-mcp se ejecuta en modo de transporte HTTP, las solicitudes de herramientas/llamadas MCP autenticadas ten\u00edan sus argumentos completos y par\u00e1metros JSON-RPC escritos en los registros del servidor por el despachador de solicitudes y varias rutas de c\u00f3digo hermanas antes de cualquier redacci\u00f3n. Cuando una llamada de herramienta lleva material de credenciales - m\u00e1s notablemente n8n_manage_credentials.data - los valores sin procesar pueden persistir en los registros. En implementaciones donde los registros se recopilan, se reenv\u00edan a sistemas externos o son visibles fuera del l\u00edmite de confianza de la solicitud (almacenamiento de registros compartido, pipelines SIEM, acceso de soporte/operaciones), esto puede resultar en la divulgaci\u00f3n de: tokens de portador y credenciales OAuth enviados a trav\u00e9s de n8n_manage_credentials, claves API por inquilino y encabezados de autenticaci\u00f3n de webhook incrustados en los argumentos de la herramienta, cargas \u00fatiles arbitrarias que contienen secretos pasadas a cualquier herramienta MCP. El problema requiere autenticaci\u00f3n (AUTH_TOKEN aceptado por el servidor), por lo que los llamadores no autenticados no pueden activarlo; la exposici\u00f3n en tiempo de ejecuci\u00f3n tambi\u00e9n se reduce por una capa existente de silenciamiento de consola en modo HTTP, pero esa capa es fr\u00e1gil y los valores a\u00fan se construyen y se pasan al registrador. Este problema ha sido parcheado en la versi\u00f3n 2.47.13."}], "id": "CVE-2026-42282", "lastModified": "2026-10-26T18:10:00.173", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-42282", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-05-12T12:47:00.245015Z", "version": "2.0.3"}}]}, "published": "2026-05-08T20:16:31.717", "references": [{"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/czlonkowski/n8n-mcp/commit/59b665bda36797823df238aeaf20adb862c9f451"}, {"source": "security-advisories@github.com", "tags": ["Product", "Release Notes"], "url": "https://github.com/czlonkowski/n8n-mcp/releases/tag/v2.47.13"}, {"source": "security-advisories@github.com", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://github.com/czlonkowski/n8n-mcp/security/advisories/GHSA-wg4g-395p-mqv3"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-532"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,2.47.13)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "n8n-mcp", "source": "cna", "vendor": "czlonkowski"}, "product": "n8n-mcp", "vendor": "czlonkowski"}], "created": "2026-05-08T20:30:16.038406+00:00", "updated": "2026-05-08T22:30:18.073197+00:00", "vendors": ["czlonkowski", "czlonkowski$PRODUCT$n8n-mcp"]}