Remote Code Execution Vulnerability in n8n Workflow Automation Platform
CVE-2025-65964
Key Information:
Badges
What is CVE-2025-65964?
The n8n workflow automation platform, versions 0.123.1 through 1.119.1, contains a vulnerability that allows an attacker to execute arbitrary code on the host system by exploiting inadequate protections in the pre-commit hooks. When using the 'Add Config' operation, workflows can set malicious Git configuration values, including core.hooksPath, leading to execution of unwanted commands during subsequent Git operations. Effective mitigation includes updating to version 1.119.2 and implementing workarounds such as excluding the Git Node or refraining from interacting with untrusted repositories.
Affected Version(s)
n8n >= 0.123.1, < 1.119.2
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.