{"schema":"threatline.record/2","record":{"id":"GHSA-rc3w-8jc8-7x3w","aliases":["GHSA-rc3w-8jc8-7x3w"],"summary":"Open Redirect via MCP OAuth Dynamic Client Registration","details":"## Impact\n\nThe MCP OAuth registration and authorization endpoints are enabled by default and require no authentication. Any caller could register an OAuth client with an arbitrary `redirect_uri`, and a crafted authorization URL then redirected the visitor to that URI before the instance's checks ran, turning the n8n instance into an open redirector. No tokens or session data were included in the redirect. A victim had to open the crafted URL.\n\n## Patches\n\nThe issue has been fixed in n8n versions 1.123.89, 2.45.5, 2.46.1 and 3.0.1. Users should upgrade to one of these versions or later to remediate the vulnerability.\n\n## Workarounds\n\nIf upgrading is not immediately possible, administrators should consider the following temporary mitigations:\n- Restrict n8n instance access to fully trusted users only.\n- Apply network-level controls or a reverse-proxy rule to block unauthenticated access to the `/mcp-oauth/register` and `/mcp-oauth/authorize` endpoints.\n- Educate users not to follow unsolicited links pointing to your n8n instance's OAuth endpoints.\n\nThese workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.","categories":["Frameworks"],"product":"n8n","vendor":"","ecosystem":null,"affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-rc3w-8jc8-7x3w","source_modified_at":"2026-10-28T08:48:38Z","fetched_at":"2026-10-28T15:55:58.673066Z","package":{"ecosystem":"npm","name":"n8n"},"range":"< 1.123.89"},{"source":"GitHub Advisory Database","source_url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-rc3w-8jc8-7x3w","source_modified_at":"2026-10-28T08:48:38Z","fetched_at":"2026-10-28T15:55:58.673066Z","package":{"ecosystem":"npm","name":"n8n"},"range":"< 2.46.1"},{"source":"GitHub Advisory Database","source_url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-rc3w-8jc8-7x3w","source_modified_at":"2026-10-28T08:48:38Z","fetched_at":"2026-10-28T15:55:58.673066Z","package":{"ecosystem":"npm","name":"n8n"},"range":"< 2.45.5"},{"source":"GitHub Advisory Database","source_url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-rc3w-8jc8-7x3w","source_modified_at":"2026-10-28T08:48:38Z","fetched_at":"2026-10-28T15:55:58.673066Z","package":{"ecosystem":"npm","name":"n8n"},"range":"< 3.0.1"}],"fixed_versions":[],"cvss":5.1,"severity":"Medium","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-28T08:48:38Z","modified_at":"2026-10-28T08:48:38Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-rc3w-8jc8-7x3w","fetched_at":"2026-10-28T15:55:58.673066Z","source_modified_at":"2026-10-28T08:48:38Z"}],"sources":["GitHub Advisory Database"],"references":[],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-28T08:48:38Z","content_hash":"6f5f803e72869083213bda23a0a8114fc3a23950ef13761f51095e65cc94dcc9"}}