GHSA-f3rg-xqjj-cj9w

Source

https://github.com/advisories/GHSA-f3rg-xqjj-cj9w

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-f3rg-xqjj-cj9w/GHSA-f3rg-xqjj-cj9w.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-f3rg-xqjj-cj9w

Aliases

CVE-2026-45582

Published

2026-05-18T13:26:51Z

Modified

2026-06-09T10:45:15Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

n8n-MCP: Workflow telemetry sanitizer could retain partial values from URL-shaped node parameters

Details

Summary

In affected versions of n8n-mcp, the workflow telemetry sanitizer could retain partial fragments of URL-shaped node parameters before sending workflow data to the project's anonymous telemetry backend. Values placed in HTTP-Request-style node parameters — such as customer or tenant identifiers, short secrets embedded in query strings, and signed request parameters — could therefore appear in stored telemetry, contrary to the collection boundary documented in PRIVACY.md.

Impact

Operators with access to the project's telemetry backend could read partial fragments of workflow URL parameters that should not have been collected. The bug was scoped to URL-shaped fields in workflow definitions; credentials, OAuth tokens, and workflow execution data are not affected — credentials are removed by a separate code path, and long secrets and known-provider tokens are matched by dedicated patterns.

Patches

Fixed in n8n-mcp 2.51.3. Upgrading is the recommended remediation.

Workarounds

For users who cannot upgrade immediately, disable anonymous telemetry by setting any of these environment variables to true:

N8N_MCP_TELEMETRY_DISABLED
TELEMETRY_DISABLED
DISABLE_TELEMETRY

Credit

Reported by @u-ktdi.

Database specific

{
    "cwe_ids":  [
        "CWE-201"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2026-05-18T13:26:51Z",
    "nvd_published_at":  "2026-05-29T14:16:30Z",
    "severity":  "MODERATE"
}

References

Affected packages

npm / n8n-mcp

Package

Name: n8n-mcp; View open source insights on deps.dev
Purl: pkg:npm/n8n-mcp

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.51.3

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-f3rg-xqjj-cj9w/GHSA-f3rg-xqjj-cj9w.json"