PatchTheCVECVE-2026-41495: n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operati
CVE-2026-41495 is a medium-severity flaw (CVSS 5.3) affecting n8n-mcp. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to version 2.47.11, when n8n-mcp runs in HTTP transport mode, incoming requests to the POST /mcp endpoint had their request metadata written to server logs regardless of the authentication outcome. In deployments where logs are collected, forwarded to external systems, or viewable outside the request trust boundary (shared log
Why this priority
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.3 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.3% (top 83%) |
| CISA exploited list | No |
| Weakness | CWE-532 |
| Published | 2026-05-08 |
| Last modified | 2026-10-26 |
Last updated 2026-10-26 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-41495?
n8n-mcp: upgrade to 2.47.11. Exact commands for each OS are on this page.
Is CVE-2026-41495 being exploited?
CVE-2026-41495 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-41495 affect?
CVE-2026-41495 affects n8n-mcp. Severity is medium (CVSS 5.3). n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to version 2.47.11, when n8n-mcp runs in HTTP transport mode, incoming requests to the POST /mcp endpoint had their req
How urgent is CVE-2026-41495?
Priority 28/100. Remotely exploitable, no login, no user action
Related CVEs
- CVE-2026-42449 HIGH 8.5 UPGRADE n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operati
- CVE-2026-44694 CRITICAL 9.1 UPGRADE n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operati
- CVE-2026-42282 MEDIUM 4.3 UPGRADE n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operati
- CVE-2026-54052 CRITICAL 9.9 UPGRADE n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operati
- CVE-2026-55608 MEDIUM 4.2 UPGRADE n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operati