CVE-2026-86081

n8n , an open-source workflow automation platform, is vulnerable to Regular Expression Denial of Service (ReDoS) in its Git node clone operation. Prior to versions 1.123.76 , 2.37.7 , and 2.38.2 , the default N8N_BLOCK_FILE_PATTERNS regex (^(./).git(/.)$) permitted catastrophic backtracking when ...

CVE-2026-86081: Inefficient Regular Expression Complexity

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node clone operation matched an attacker-controlled destination path against the default N8NBLOCKFILEPATTERNS regular expression. The pattern ^./.git/.$ allowed catastrophic backtracking and ran...