Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

czlonkowski/n8n-mcp

              main @ f5694cc
            

Fixes

CVEs

CRITICAL

Peak severity

57.9%

Coverage

Highlights

Denial of Service: 22 prior fixes. Scrutinize any change in this area.

src/http-server-single-session.ts: most-fixed (13 issues). Treat as high-risk during review.

35 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Multi-tenant session restoration was historically vulnerable to authorization bypasses (CVE-2026-45707) and credential leaks when handling asymmetric x-n8n-url and x-n8n-key headers, occasionally falling back to operator credentials when headers were missing entirely. Additionally, empty or whitespace-only auth tokens were accepted.

SSRF: SSRF validation mechanisms have suffered from critical bypasses (including IPv6-mapped IPv4, DNS64/NAT64, unique local addresses, and cloud metadata targets like Alibaba and Oracle) which permitted remote attackers to probe private networks.

Command Injection: Insecure shell execution using child_process.execSync with unvalidated string inputs allowed arbitrary command execution when resolving resource and documentation components.