CVE-2026-110845

Deferred Deferred - Pending Action

Code Execution in n8n via Git Node Log Operation

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: VulnCheck

Description

n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution vulnerability in the Git node Log operation, which fails to strip a repository's local git configuration before invoking an external program. Authenticated members who can point the node, including as an agent tool, at a repository whose local configuration they control can execute programs as the n8n process user.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-110845

EUVD

EUVD-2026-101728

Affected Vendors & Products

Vendor	Product	Version / Range
n8n-io	n8n	0
n8n-io	n8n	2.0.0
n8n-io	n8n	2.42.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-15	One or more system settings or configuration elements can be externally controlled by a user.

Attack-Flow Graph

Executive Summary

This vulnerability is a code execution flaw in n8n versions before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1. It occurs in the Git node Log operation, which does not remove a repository's local Git configuration before running an external program. Authenticated users who can configure the node, including as an agent tool, can exploit this to execute programs as the n8n process user by controlling a repository's local configuration.

The vulnerability has a CVSS v4.0 base score of 7.7, indicating high impact on confidentiality, integrity, and availability.

Detection Guidance

To detect this vulnerability, check if your n8n instance is running a vulnerable version (before 1.123.83, 2.x before 2.41.4, or 2.42.x before 2.42.1). Review Git node configurations for any repositories with user-controlled local git configurations that could execute arbitrary programs.

Impact Analysis

If you use a vulnerable version of n8n, an attacker with authenticated access could execute arbitrary code on the system running n8n. This could lead to data theft, system compromise, or further network infiltration, depending on the permissions of the n8n process user.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Organizations using vulnerable n8n versions risk non-compliance due to potential exposure of sensitive data or system integrity issues.

Mitigation Strategies

Update n8n to version 1.123.83, 2.41.4, or 2.42.1 or later to address the vulnerability in the Git node Log operation.

Hi! I’m here to help you understand CVE-2026-110845. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70