Executive brief
n8n is a workflow automation platform that allows users to orchestrate business processes by connecting various applications and services. The Git node, which enables git operations within workflows, contained a sandbox bypass flaw that allowed authenticated users to pull arbitrary git repositories from outside the intended sandbox directory, exposing sensitive files and repository history to unauthorized access.
Technical details
The vulnerability is a path traversal / sandbox escape in n8n's Git node affecting fetch, pull, and pushTags operations. While clone and push operations had repository-path containment checks, the fetch, pull, and pushTags operations lacked equivalent protections. An authenticated user with workflow create/execute rights could point an allowlisted remote configuration value to a local path outside the sandbox, allowing them to pull arbitrary local git repositories into the workspace and read their files and history. The attack requires prior authentication and workflow execution privileges. The issue was patched in n8n versions 1.123.67, 2.31.5, and 2.32.1.
Affected products
- n8n n8n before 1.123.67, 2.0.0-rc.0 before 2.31.5, 2.32.0 before 2.32.1
Timeline
- 2026-07-22: disclosed
- 2026-07-22: patched: Fixed in versions 1.123.67, 2.31.5, and 2.32.1