{"data":{"id":"2b3ed6bd-b69c-4361-acd3-f4d25144ab14","title":"GHSA-g3r5-9h93-4j2c: n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution","summary":"A TOCTOU race condition (a timing vulnerability where an attacker exploits the gap between when a system checks something and when it uses that information) in n8n's Git clone node lets authenticated users bypass security checks by swapping a directory for a symlink, allowing them to run arbitrary code on the server. Both self-hosted and cloud versions of n8n are affected.","solution":"Users should upgrade to the patched version once available. As temporary workarounds if upgrading is not immediately possible, administrators can: restrict n8n instance access to fully trusted users only, disable the Git node by adding `n8n-nodes-base.git` to the `NODES_EXCLUDE` environment variable, or restrict network egress from the n8n instance to prevent connections to attacker-controlled git repositories. The source notes these workarounds do not fully remediate the risk and should only be used as short-term measures.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-g3r5-9h93-4j2c","publishedAt":"2026-07-22T17:56:35.000Z","cveId":"CVE-2026-65598","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["n8n@>= 2.0.0-rc.0, < 2.29.8 (fixed: 2.29.8)","n8n@>= 2.30.0, < 2.30.1 (fixed: 2.30.1)","n8n@< 1.123.64 (fixed: 1.123.64)"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["n8n"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"patchAvailable":true,"disclosureDate":"2026-07-22T17:56:35.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0010"]}}