Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/07/22 10:06 p.m.•20 views

n8n: Git Node fetch/pull/pushTags Operations Bypass Sandbox Path Restriction

Impact Authenticated n8n users with workflow create/execute rights could use the Git node's fetch, pull, or push-tags operations to bypass the repository-path containment checks that already protected clone and push. By pointing an allowlisted remote configuration value at a local path outside th...

5.7AI score
SaveExploits0References6Affected Software1
Rows per page
Query Builder