n8n-mcp could connect to an address different from the one checked by its URL validation. The repair pins the HTTP client to the validated address and disables redirect following.

How AI contributed: Direct introductionPublished May 4, 2026 in czlonkowski/n8n-mcpAll 11 findings in this repository

Provisional finding. Full causal and release verification remains incomplete.

Root cause

SSRF & network boundaries introduced

The client is constructed from the configured base URL without a pinned network address.

AI-assisted change: Claude

74f05e937f

src/services/n8n-api-client.ts

Fix

Security fix

The request interceptor installs transport agents pinned to the validated address.

Fix by Romuald Członkowski · no AI marker found

bcaba83940

src/services/n8n-api-client.ts

Case facts

CVE ID: CVE-2026-44694
GHSA ID: GHSA-CMRH-WVQ6-WM9R
Published: May 4, 2026
Severity: high
Language: TypeScript
AI tool: Claude
AI role: Direct introduction
Vulnerable release: >= 2.18.7, < 2.50.2
Fixed release: 2.50.2

CWE-367 CWE-918

Advisory source

AI-assisted change

AI-assisted changesrc/services/n8n-api-client.ts source czlonkowski/n8n-mcp@74f05e937f+18−0

@@ -0,0 +43,18 @@++    // Ensure baseUrl ends with /api/v1+    const apiUrl = baseUrl.endsWith('/api/v1') +      ? baseUrl +      : `${baseUrl.replace(/\/$/, '')}/api/v1`;++    this.client = axios.create({+      baseURL: apiUrl,+      timeout,+      headers: {

Show 8 hidden lines

+        'X-N8N-API-KEY': apiKey,+        'Content-Type': 'application/json',+      },+    });++    // Request interceptor for logging+    this.client.interceptors.request.use(+      (config: InternalAxiosRequestConfig) => {

The client is constructed from the configured base URL without a pinned network address.

Security fix

Fixsrc/services/n8n-api-client.ts source czlonkowski/n8n-mcp@bcaba83940+7−2

@@ -94,8 +100,13 @@-    // Request interceptor for logging+    // Request interceptor for logging + transport pinning     this.client.interceptors.request.use(-      (config: InternalAxiosRequestConfig) => {+      async (config: InternalAxiosRequestConfig) => {+        // SECURITY (GHSA-cmrh-wvq6-wm9r): pin transport to validated IP.+        const agents = await this.getPinnedAgents();+        config.httpAgent = agents.httpAgent;+        config.httpsAgent = agents.httpsAgent;+

Show 5 hidden lines

         // Redact request body for credential endpoints to prevent secret leakage         const isSensitive = config.url?.includes('/credentials') && config.method !== 'get';         logger.debug(`n8n API Request: ${config.method?.toUpperCase()} ${config.url}`, {           params: config.params,           data: isSensitive ? '[REDACTED]' : config.data,

The request interceptor installs transport agents pinned to the validated address.

Patch fingerprints

AI-assisted change b9e86decd66b9a58163f84b1b88f44938faf446d68c0780e17c593991225ba75 · Fix 2ad09ef35279b6f144764197ce451144f79bc2115aebaedfb1f96baebc56200a

Advisory references

AI-assisted change

AI-assisted changesrc/services/n8n-api-client.ts source czlonkowski/n8n-mcp@74f05e937f+18−0

@@ -0,0 +43,18 @@++    // Ensure baseUrl ends with /api/v1+    const apiUrl = baseUrl.endsWith('/api/v1') +      ? baseUrl +      : `${baseUrl.replace(/\/$/, '')}/api/v1`;++    this.client = axios.create({+      baseURL: apiUrl,+      timeout,+      headers: {

Show 8 hidden lines

+        'X-N8N-API-KEY': apiKey,+        'Content-Type': 'application/json',+      },+    });++    // Request interceptor for logging+    this.client.interceptors.request.use(+      (config: InternalAxiosRequestConfig) => {

The client is constructed from the configured base URL without a pinned network address.

Security fix

Fixsrc/services/n8n-api-client.ts source czlonkowski/n8n-mcp@bcaba83940+7−2

@@ -94,8 +100,13 @@-    // Request interceptor for logging+    // Request interceptor for logging + transport pinning     this.client.interceptors.request.use(-      (config: InternalAxiosRequestConfig) => {+      async (config: InternalAxiosRequestConfig) => {+        // SECURITY (GHSA-cmrh-wvq6-wm9r): pin transport to validated IP.+        const agents = await this.getPinnedAgents();+        config.httpAgent = agents.httpAgent;+        config.httpsAgent = agents.httpsAgent;+

Show 5 hidden lines

         // Redact request body for credential endpoints to prevent secret leakage         const isSensitive = config.url?.includes('/credentials') && config.method !== 'get';         logger.debug(`n8n API Request: ${config.method?.toUpperCase()} ${config.url}`, {           params: config.params,           data: isSensitive ? '[REDACTED]' : config.data,

The request interceptor installs transport agents pinned to the validated address.