cve-2025-62726-poc

CVE-2025-62726 POC - n8n Git Node RCE Scopo Educativo Questa è una dimostrazione proof-of-concept per CVE-2025-62726, creata a scopo educativo come parte di un progetto di classe. Parte del corso CMU: 18-739 Hacking & Offensive Security nell'autunno 2025 Panoramica della Vulnerabilità CVE ID:...

Remote Code Execution (RCE)

n8n is vulnerable to Remote Code Execution. The vulnerability is due to unsafe execution of Git pre-commit hooks, where cloning a repository containing a malicious hook and later performing a commit via the Git Node can trigger arbitrary command execution within the n8n environment...

CVE-2025-65964 n8n Vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook

n8n is an open source workflow automation platform. Versions 0.123.1 through 1.119.1 do not have adequate protections to prevent RCE through the project's pre-commit hooks. The Add Config operation allows workflows to set arbitrary Git configuration values, including core.hooksPath, which can poi...