# CVE-2026-42282: czlonkowski n8n-mcp sensitive information disclosure in logs

Source: https://junglewise.ai/threats/cve-2026-42282-czlonkowski-n8n-mcp-sensitive-information-leak-in-logs  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-08. Updated: 2026-05-14  
License: CC BY 4.0 with a link back

CVE-2026-42282 · Severity: medium · CVSS 4.3 · Published 2026-05-08

n8n-mcp is a server that allows AI assistants to interact with n8n automation workflows. A security flaw in versions prior to 2.47.13 causes the server to record sensitive information, such as API keys and login tokens, into its internal activity logs when running in HTTP mode. If these logs are shared with other systems or viewed by unauthorized personnel, it could lead to the theft of credentials and unauthorized access to connected services.

Technologies: [n8n-mcp (npm)](https://junglewise.ai/threats/technologies/n8n-mcp). Vendors: [npm](https://junglewise.ai/threats/vendors/npm).

## Quick answers

**Is CVE-2026-42282 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-42282 being exploited in the wild.

**How severe is CVE-2026-42282?** Medium severity, with a CVSS score of 4.3, published 8 May 2026.

**Which products and versions are affected?** n8n-mcp (npm) < 2.47.13, SEMVER:introduced=0,fixed=2.47.13.

**Is there a fix for CVE-2026-42282?** Yes. n8n-mcp (npm): upgrade to 2.47.13 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-42282 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-42282?** Check whether you run n8n-mcp (npm) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- n8n-mcp (npm): upgrade to 2.47.13 or later

  ```sh
  npm install n8n-mcp@2.47.13
  ```


## Technical details

n8n-mcp prior to version 2.47.13 is vulnerable to sensitive information disclosure (CWE-532) when operating in HTTP transport mode. The request dispatcher and related code paths write full JSON-RPC parameters and tool arguments to server logs before any redaction occurs. This includes sensitive data such as bearer tokens, OAuth credentials, and per-tenant API keys passed via 'n8n_manage_credentials'. An authenticated attacker or a legitimate user performing standard operations can trigger the logging of these secrets. The vulnerability is mitigated if using the 'stdio' transport mode, but in HTTP mode, the existing console-silencing layer is insufficient to prevent the data from being passed to the logger. The issue is fixed in version 2.47.13 by implementing a metadata-only summarizer for tool-call arguments.

## Affected products

- czlonkowski n8n-mcp <= 2.47.12

## Identifiers

- CVE-2026-42282
- GHSA-wg4g-395p-mqv3

## Timeline

- 2026-04-20: patched: Version 2.47.13 released
- 2026-04-21: advisory: GitHub Security Advisory published
- 2026-05-08: disclosed: CVE published to NVD

## References

- [https://github.com/czlonkowski/n8n-mcp/commit/59b665bda36797823df238aeaf20adb862c9f451](https://github.com/czlonkowski/n8n-mcp/commit/59b665bda36797823df238aeaf20adb862c9f451)
- [https://github.com/czlonkowski/n8n-mcp/releases/tag/v2.47.13](https://github.com/czlonkowski/n8n-mcp/releases/tag/v2.47.13)
- [https://github.com/czlonkowski/n8n-mcp/security/advisories/GHSA-wg4g-395p-mqv3](https://github.com/czlonkowski/n8n-mcp/security/advisories/GHSA-wg4g-395p-mqv3)

## Related threats

- [czlonkowski n8n-mcp incorrect authorization in multi-tenant HTTP mode](https://junglewise.ai/threats/cve-2026-55608-czlonkowski-n8n-mcp-incorrect-authorization-in-multi-tenant-http)
- [czlonkowski n8n-mcp authorization bypass in workflow backups](https://junglewise.ai/threats/cve-2026-54052-czlonkowski-n8n-mcp-authorization-bypass-in-workflow-backups)
- [czlonkowski n8n-mcp improper access control in multi-tenant mode](https://junglewise.ai/threats/cve-2026-45707-czlonkowski-n8n-mcp-improper-access-control-in-multi-tenant-mode)
- [czlonkowski n8n-mcp sensitive information leak in workflow telemetry](https://junglewise.ai/threats/cve-2026-45582-czlonkowski-n8n-mcp-sensitive-information-leak-in-workflow)
- [czlonkowski n8n-mcp authenticated SSRF in webhook and API client](https://junglewise.ai/threats/cve-2026-44694-czlonkowski-n8n-mcp-ssrf-in-webhook-and-api-client-paths)