CVE-2026-72770

Analyzed Analyzed - Analysis Complete

Path Traversal in n8n Git Node Operations

Publication date: 2026-08-11

Last updated on: 2026-10-29

Assigner: VulnCheck

Description

n8n versions before 1.123.67 contain a path traversal vulnerability in the Git node's fetch, pull, and push-tags operations that allows authenticated users to bypass repository-path containment checks. Attackers with workflow create/execute rights can point allowlisted remote configurations at local paths outside the sandbox to pull arbitrary git repositories and read their files and history.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-10-29

Generated

2026-11-08

AI Q&A

2026-08-11

EPSS Evaluated

2026-11-07

NVD

CVE-2026-72770

EUVD

EUVD-2026-56096

Affected Vendors & Products

Vendor	Product	Version / Range
n8n	n8n	to 1.123.67 (exc)
n8n	n8n	From 2.31.0 (inc) to 2.31.5 (exc)
n8n	n8n	From 2.32.0 (inc) to 2.32.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

CVE-2026-72770 is a path traversal vulnerability in n8n versions before 1.123.67 affecting the Git node's fetch, pull, and push-tags operations. Authenticated users with workflow creation or execution rights can bypass repository-path restrictions by pointing allowlisted remote configurations to local paths outside the sandbox. This allows reading arbitrary files and Git history from local repositories.

Detection Guidance

Check n8n version with 'n8n --version' or inspect package.json. Look for unauthorized Git repository access in logs or file system changes outside expected directories. Monitor for suspicious workflows using Git node operations pointing to local paths.

Impact Analysis

Attackers with low privileges can exploit this to access sensitive files and repository history on the affected system. The vulnerability enables high confidentiality loss but does not impact system integrity or availability. Exploitation requires authenticated access with workflow rights.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, potentially violating GDPR (data protection) and HIPAA (health information privacy) by exposing confidential files and repository history. Organizations must patch to maintain compliance.

Mitigation Strategies

Upgrade n8n to version 1.123.67 or later immediately. Temporarily restrict workflow creation/execution to trusted users only. Disable the Git node if not required. Review and audit existing workflows for suspicious Git operations.

Hi! I’m here to help you understand CVE-2026-72770. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...