Lucene search
+L

1 matches found

OSV
OSV
added 2026/07/22 10:06 p.m.15 views

GHSA-GF29-4F56-R2JF n8n: Git Node fetch/pull/pushTags Operations Bypass Sandbox Path Restriction

Impact Authenticated n8n users with workflow create/execute rights could use the Git node's fetch, pull, or push-tags operations to bypass the repository-path containment checks that already protected clone and push. By pointing an allowlisted remote configuration value at a local path outside th...

7.1CVSS5.7AI score0.00464EPSS
SaveExploits0References6
Rows per page
Query Builder