Evidence · DiggingBeagle record
n8n-mcp workflow update prototype pollution advisory
Third-party n8n-mcp tool adapter advisory for object prototype pollution and shared-process state.
- Source role
- primary disclosure
Evidence record
Third-party n8n-mcp tool adapter advisory for object prototype pollution and shared-process state.
Claim-level citations (2)
- supportsn8n-mcp tool updates could pollute a shared JavaScript prototype: The n8n-mcp prototype-pollution advisory reports that workflow property names could modify shared JavaScript prototypes, including in preview and validation-only tool paths.
GHSA-ppgm-m8rg-4wqv: autofix, preview/validateOnly and multi-tenant impact
- supportsn8n-mcp tool updates could pollute a shared JavaScript prototype: The separate n8n-mcp adapter accepted workflow parameter and connection keys that could write reserved JavaScript prototype properties during update or autofix operations. The cross-tenant consequence requires n8n-mcp multi-tenant mode with a shared Node.js process; it must not be attributed to core n8n. Shared inherited state could be changed by one tenant and affect operations belonging to another, including preview-only validation flows.
GHSA-ppgm-m8rg-4wqv: autofix, preview/validateOnly and multi-tenant impact