Code Execution Vulnerability in n8n Git Node Log Operation
CVE-2026-110845

7.7HIGH

Key Information:

Vendor

N8n-io

Status
N8n
Vendor
CVE Published:
14 October 2026

What is CVE-2026-110845?

The n8n workflow automation tool contains a vulnerability in its Git node Log operation that allows authenticated users to execute arbitrary code. This issue arises from the failure to strip a repository's local git configuration prior to invoking external programs. As a result, users who control a repository can potentially execute commands with the privileges of the n8n process, which poses a significant security risk. Users are urged to update to the latest versions to mitigate this risk.

Affected Version(s)

n8n 0 < 1.123.83

n8n 2.0.0 < 2.41.4

n8n 2.42.0 < 2.42.1

References

https://github.com/n8n-io/n8n/security/advisories/GHSA-x8...
vendor-advisory
https://www.vulncheck.com/advisories/n8n-before-1.123.83-...
third-party-advisory

CVSS V4

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

tr4ce-ju
.