Lucene search
+L

1 matches found

OSV
OSV
added yesterday4 views

GHSA-GF29-4F56-R2JF n8n: Git Node fetch/pull/pushTags Operations Bypass Sandbox Path Restriction

Impact Authenticated n8n users with workflow create/execute rights could use the Git node's fetch, pull, or push-tags operations to bypass the repository-path containment checks that already protected clone and push. By pointing an allowlisted remote configuration value at a local path outside th...

7.1CVSS5.7AI score
SaveExploits0References6
Rows per page
Query Builder