A serious security flaw, identified as CVE-2026-54309, has been discovered in n8n, an open-source workflow automation platform. This vulnerability, rated as CRITICAL, could allow unauthorized individuals to take control of a user’s browser activities under specific configurations. It affects the `@n8n\/mcp-browser` component when operating in HTTP transport mode.<\/p>\n
In simple terms, if your n8n setup uses the HTTP transport option for `@n8n\/mcp-browser`, an attacker or even a malicious website you visit could potentially connect to your n8n instance without needing any login information. Once connected, they could then use your browser to navigate to websites, run their own scripts, and even access sensitive data like your browser cookies and stored information.<\/p>\n
Product:<\/strong> n8n<\/p>\n Published Date:<\/strong> June 23, 2026<\/p>\n Severity:<\/strong> CRITICAL<\/p>\n Status:<\/strong> Analyzed<\/p>\n This vulnerability specifically impacts n8n instances where the `@n8n\/mcp-browser` component is configured to run with the HTTP transport mode (`–transport http`). The default stdio transport mode is not affected.<\/p>\n Affected versions include all versions prior to:<\/p>\n The vulnerability has been officially analyzed. The details, including its critical severity and potential impact, have been made public to ensure users are aware and can take necessary protective measures. Fixes are available and highly recommended.<\/p>\n CVE-2026-54309 carries a **CRITICAL** severity rating with a CVSS score of 10.0. This high score reflects the significant risk posed by the vulnerability, as it allows for complete unauthenticated control over a user’s browser profile, including access to sensitive data and the ability to execute arbitrary code within the browser context. The attack requires no special privileges or user interaction once the vulnerable configuration is in place and the n8n AI Browser Bridge extension is active.<\/p>\n Users of n8n are strongly urged to address this vulnerability immediately. The good news is that patches are available:<\/p>\n If an immediate upgrade is not feasible, temporary mitigation steps can be taken:<\/p>\n These workarounds should be considered short-term solutions only, and a full upgrade to a patched version remains the best course of action to secure your n8n instance.<\/p>\n https:\/\/github.com\/n8n-io\/n8n\/security\/advisories\/GHSA-qrx8-25qr-5r7v<\/p>\n","protected":false},"excerpt":{"rendered":" Understanding the Critical Threat in n8n’s Browser Control A serious security flaw, identified as CVE-2026-54309, has been discovered in n8n, an open-source workflow automation platform. This vulnerability, rated as CRITICAL, could allow unauthorized individuals to take control of a user’s browser activities under specific configurations. It affects the `@n8n\/mcp-browser` component when operating in HTTP transport […]<\/p>\n","protected":false},"author":17,"featured_media":3515,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1161,732,1067,727,1068],"class_list":["post-3751","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-browser-security","tag-cybersecurity","tag-n8n","tag-unauthenticated-access","tag-workflow-automation"],"blocksy_meta":[],"yoast_head":"\nAffected Products<\/h2>\n
\n
Current Status<\/h2>\n
Severity Level<\/h2>\n
Possible Solutions<\/h2>\n
\n
\n
References<\/h2>\n