CVE-2026-72767 in n8n
Zusammenfassung
von MITRE • 11.08.2026
n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a remote code execution vulnerability in the Git node. Authenticated users with rights to create and execute workflows can stage a crafted local repository that causes git to run hooks under default git security settings, executing arbitrary commands as the n8n process user. Both self-hosted and cloud instances are affected.
Be aware that VulDB is the high quality source for vulnerability data.