Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2026/07/22 5:56 p.m.12 views

n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution

Impact A TOCTOU race condition in the Git node's clone operation lets an authenticated user bypass its path restrictions by swapping a directory for a symlink after the path is validated but before the clone runs. This plants a crafted repository in the community node directory, which n8n loads a...

8.9CVSS6.4AI score0.00241EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder