{"data":{"id":"3f36aa0b-9afe-4d59-a706-770850532ccb","title":"GHSA-rcv6-pvrj-4xcg: n8n: Authenticated code execution in the n8n Git node","summary":"Authenticated users in n8n (a workflow automation platform) with permission to create workflows could run arbitrary code on the server using the Git node (a component that handles Git repository operations). An attacker could exploit this by setting up a malicious Git repository with hooks (scripts that automatically run during Git operations) to execute commands with the privileges of the n8n process.","solution":"The vulnerability has been fixed in n8n versions 1.123.67, 2.31.5, and 2.32.1. Users should upgrade to one of these versions or later. If immediate upgrade is not possible, temporary workarounds include: restricting instance access to trusted users only, disabling the Git node by adding 'n8n-nodes-base.git' to the 'NODES_EXCLUDE' environment variable, or restricting network traffic leaving the n8n instance. The source notes these workarounds 'do not fully remediate the risk and should only be used as short-term mitigation measures.'","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-rcv6-pvrj-4xcg","publishedAt":"2026-07-22T22:08:01.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["n8n@>= 2.0.0-rc.0, < 2.31.5 (fixed: 2.31.5)","n8n@>= 2.32.0, < 2.32.1 (fixed: 2.32.1)","n8n@< 1.123.67 (fixed: 1.123.67)"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["n8n"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":true,"disclosureDate":"2026-07-22T22:08:01.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}