Executive brief
n8n is a workflow automation platform that allows users to create and run automated processes. The Git node within n8n allows workflows to configure Git settings, but a vulnerability allows attackers to execute arbitrary commands on the host system by setting a malicious Git hook path. An attacker with the ability to create or modify workflows can exploit this to gain complete control over the n8n host server, including access to all data and configurations.
Technical details
The vulnerability exists in the n8n Git node's "Add Config" operation, which improperly allows setting arbitrary Git configuration values without sanitization. Specifically, an attacker can set core.hooksPath to point to a directory containing malicious Git hooks (e.g., pre-commit) within a cloned repository. When Git operations are performed, these hooks execute as local system commands with the privileges of the n8n process. The attack requires the ability to create or modify an n8n workflow using the Git node. The vulnerability has been patched in version 1.119.2 and all users running versions ≥0.123.1 and <1.119.2 should upgrade immediately.
Affected products
- n8n n8n ≥0.123.1, <1.119.2
Timeline
- 2025-12-08: disclosed
- 2025-12-08: patched: Version 1.119.2 released with patch