CVE-2026-86995: n8n Git Node config bypass enables local repository read

CVE-2026-86995 · Severity: medium · CVSS 4.3 · Published 2026-09-08

n8n is a workflow automation platform that includes a Git node for performing git operations like fetch and pull. A flaw in the Git node allows authenticated users with workflow-edit permissions to read the contents of any local Git repository that the n8n process has access to, bypassing intended security restrictions. An attacker with this permission level could extract sensitive data from repositories on the same system.

Technologies: N8n, n8n (npm). Vendors: N8n, npm.

Quick answers

Is CVE-2026-86995 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-86995 being exploited in the wild.
How severe is CVE-2026-86995?
Medium severity, with a CVSS score of 4.3, published 8 September 2026.
Which products and versions are affected?
N8n < 1.123.76, >= 2.0.0 and < 2.37.7, >= 2.38.0 and < 2.38.2; n8n (npm) SEMVER:introduced=0,fixed=1.123.76.
Is there a fix for CVE-2026-86995?
Yes. n8n (npm): upgrade to 1.123.76 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-86995 attacked?
It is attacked over the network, in a software library.
Am I affected by CVE-2026-86995?
Check whether you run N8n or n8n (npm) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • n8n (npm): upgrade to 1.123.76 or later
    npm install n8n@1.123.76

Technical details

The vulnerability is a path traversal / external control of file name (CWE-22, CWE-73) in the n8n Git node. The setUpstream function writes a branch.<name>.remote value into the git repository configuration without validating it against the same path restrictions applied to the repository parameter. When a subsequent fetch or pull operation occurs, it reads the remote from the unvalidated configuration key rather than the checked parameter, allowing an authenticated attacker to redirect git operations to any readable local repository. This requires workflow-edit permission and network reachability to the n8n instance. The fix validates the branch remote configuration using the same terms as the repository parameter. Patches are available in versions 1.123.76, 2.37.7, and 2.38.2.

Affected products

  • n8n n8n < 1.123.76, >= 2.0.0 and < 2.37.7, >= 2.38.0 and < 2.38.2

Identifiers

  • CVE-2026-86995
  • GHSA-qgpw-8g46-w95v

Timeline

  • 2026-09-10: disclosed
  • 2026-09-10: patched: Patches released: n8n 1.123.76, 2.37.7, 2.38.2

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.