GHSA-g3r5-9h93-4j2c: n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution
Summary
A TOCTOU race condition (a timing vulnerability where an attacker exploits the gap between when a system checks something and when it uses that information) in n8n's Git clone node lets authenticated users bypass security checks by swapping a directory for a symlink, allowing them to run arbitrary code on the server. Both self-hosted and cloud versions of n8n are affected.
Solution / Mitigation
Users should upgrade to the patched version once available. As temporary workarounds if upgrading is not immediately possible, administrators can: restrict n8n instance access to fully trusted users only, disable the Git node by adding `n8n-nodes-base.git` to the `NODES_EXCLUDE` environment variable, or restrict network egress from the n8n instance to prevent connections to attacker-controlled git repositories. The source notes these workarounds do not fully remediate the risk and should only be used as short-term measures.
Vulnerability Details
EPSS: 0.0%
Yes
July 22, 2026
Classification
Taxonomy References
Affected Vendors
Affected Packages
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e
Original source: https://github.com/advisories/GHSA-g3r5-9h93-4j2c
First tracked: July 22, 2026 at 02:00 PM
Classified by LLM (prompt v3) · confidence: 85%