Lucene search
+L

90 matches found

Github Security Blog
Github Security Blog
added 2025/10/30 5:04 p.m.16 views

n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook

Impact A remote code execution vulnerability exists in the Git Node component available in both Cloud and Self-Hosted versions of n8n. When a malicious actor clones a remote repository containing a pre-commit hook, the subsequent use of the Commit operation in the Git Node can inadvertently trigg...

8.8CVSS8.4AI score0.0076EPSS
SaveExploits3References5Affected Software1
OSV
OSV
added 2025/10/30 5:04 p.m.10 views

GHSA-XGP7-7QJQ-VG47 n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook

Impact A remote code execution vulnerability exists in the Git Node component available in both Cloud and Self-Hosted versions of n8n. When a malicious actor clones a remote repository containing a pre-commit hook, the subsequent use of the Commit operation in the Git Node can inadvertently trigg...

8.8CVSS8.4AI score0.0076EPSS
SaveExploits3References5
EUVD
EUVD
added 2025/10/30 5:04 p.m.11 views

EUVD-2025-37026

n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook...

8.8CVSS6.8AI score0.0076EPSS
SaveExploits3References4
Snyk
Snyk
added 2025/10/30 5:04 p.m.15 views

Unsafe Dependency Resolution

Amendment This issue was found to be a duplicate. The original vulnerability with details can be found here. Credit: Assaf Levkovich...

8.8CVSS7.7AI score0.0076EPSS
SaveExploits3References2
Vulnrichment
Vulnrichment
added 2025/10/30 4:24 p.m.4 views

CVE-2025-62726 n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook

n8n is an open source workflow automation platform. Prior to 1.113.0, a remote code execution vulnerability exists in the Git Node component available in both Cloud and Self-Hosted versions of n8n. When a malicious actor clones a remote repository containing a pre-commit hook, the subsequent use ...

8.8CVSS8.4AI score0.0076EPSS
SaveExploits3References3
CVE
CVE
added 2025/10/30 4:24 p.m.34 views

CVE-2025-62726

The CVE-2025-62726 entry concerns n8n (Cloud and Self-Hosted) with a remote code execution vulnerability in the Git Node prior to 1.113.0. When cloning a remote repository containing a pre-commit hook, a subsequent Commit operation can trigger the hook, allowing arbitrary code execution in the n8...

8.8CVSS8.4AI score0.0076EPSS
SaveExploits3References3Affected Software1
Cvelist
Cvelist
added 2025/10/30 4:24 p.m.19 views

CVE-2025-62726 n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook

n8n is an open source workflow automation platform. Prior to 1.113.0, a remote code execution vulnerability exists in the Git Node component available in both Cloud and Self-Hosted versions of n8n. When a malicious actor clones a remote repository containing a pre-commit hook, the subsequent use ...

8.8CVSS0.0076EPSS
SaveExploits3References3
OSV
OSV
added 2025/10/30 4:24 p.m.11 views

CVE-2025-62726 n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook

n8n is an open source workflow automation platform. Prior to 1.113.0, a remote code execution vulnerability exists in the Git Node component available in both Cloud and Self-Hosted versions of n8n. When a malicious actor clones a remote repository containing a pre-commit hook, the subsequent use ...

8.8CVSS8.8AI score
SaveExploits0References5
CNNVD
CNNVD
added 2025/10/30 12:00 a.m.14 views

n8n 安全漏洞

n8n is a scalable workflow automation tool from n8n open source. A security vulnerability exists in versions prior to n8n 1.113.0 that originates when the Git Node component triggers execution when cloning remote repositories containing pre-commit hooks, which could lead to remote code execution...

8.8CVSS7.6AI score0.0076EPSS
SaveExploits3References3
Positive Technologies
Positive Technologies
added 2025/10/30 12:00 a.m.8 views

PT-2025-44432

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.113.0 Description n8n is a workflow automation platform with a remote code execution issue in the Git Node component, affecting both Cloud and Self-Hosted versions. A malicious actor can exploit this by cloning a...

8.8CVSS8AI score0.0076EPSS
SaveExploits3References22
Rows per page
Query Builder