Executive brief
n8n is a workflow automation platform that allows users to create and run automated processes. The Git Node component contains a vulnerability that lets authenticated users with workflow permissions bypass file access restrictions designed to prevent reading sensitive files. An attacker could exploit this to access any files that the n8n server can read, potentially exposing secrets, configuration data, or other sensitive information stored on the system.
Technical details
The vulnerability is a path traversal / sandbox bypass (CWE-22) in the Git Node's Clone and Push operations. An authenticated user with permission to create or modify workflows can supply a local filesystem path as the source repository (Clone) or target repository (Push) parameter, which bypasses the N8N_RESTRICT_FILE_ACCESS_TO sandbox. This allows the attacker to clone the contents of arbitrary local git repositories accessible to the n8n process into an allowed path, effectively reading files that would be blocked by direct file access. The attack requires authentication and workflow creation/modification permissions, but no user interaction. The vulnerability affects n8n versions before 1.123.48, 2.21.8, and 2.22.4, which contain patches.
Affected products
- n8n n8n before 1.123.48, 2.0.0-rc.0 to 2.21.7, 2.22.0 to 2.22.3
Timeline
- 2026-06-16: disclosed: Vulnerability published on GitHub
- 2026-06-16: patched: Fixed in n8n versions 1.123.48, 2.21.8, and 2.22.4