Lucene search
+L

9 matches found

OSV
OSV
added 4 days ago4 views

GHSA-G3R5-9H93-4J2C n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution

Impact A TOCTOU race condition in the Git node's clone operation lets an authenticated user bypass its path restrictions by swapping a directory for a symlink after the path is validated but before the clone runs. This plants a crafted repository in the community node directory, which n8n loads a...

8.9CVSS6.5AI score0.00207EPSS
SaveExploits0References7
Rows per page
Query Builder