Remote Code Execution Vulnerability in n8n Git Node

CVE-2026-77084

What is CVE-2026-77084?

n8n is affected by a vulnerability within the Git node, which improperly processes repository-local git configuration values. This flaw allows unauthorized code execution as the n8n process user when interacting with a repository that contains a crafted configuration value. It is crucial to note that this vulnerability requires an additional file-write flaw for exploitation to occur, emphasizing the need for robust security practices to protect repositories.

References