Executive brief
n8n is a workflow automation platform that includes a Git node for interacting with repositories. The Git node reads certain configuration values from local repository settings without proper sanitization, allowing arbitrary command execution as the n8n process user. Exploitation requires a separate file-write vulnerability to inject a malicious configuration value into a repository, but once in place, any subsequent Git node operation triggers remote code execution.
Technical details
The vulnerability is an OS command injection (CWE-78) in the n8n Git node. The node reads repository-local git configuration values and executes them without neutralizing special shell metacharacters or validating their contents. An attacker with the ability to write files to a target repository (via a separate file-write vulnerability or compromised repository access) can plant a malicious git configuration value. When any Git node operation subsequently reads this repository, the unsanitized configuration is executed as a shell command in the context of the n8n process user, achieving remote code execution. The vulnerability is not reachable through the Git node's own UI controls, which properly restrict configuration keys, but rather through direct manipulation of repository files. Patched versions are 1.123.69+, 2.33.4+, and 2.34.1+.
Affected products
- n8n n8n before 1.123.69, 2.x before 2.33.4, 2.x before 2.34.1
Timeline
- 2026-08-05: disclosed
- 2026-08-20: advisory