CVE-2026-72770
Received Received - Intake

Path Traversal in n8n Git Node Operations

Publication date: 2026-08-11

Last updated on: 2026-08-11

Assigner: VulnCheck

Description
n8n versions before 1.123.67 contain a path traversal vulnerability in the Git node's fetch, pull, and push-tags operations that allows authenticated users to bypass repository-path containment checks. Attackers with workflow create/execute rights can point allowlisted remote configurations at local paths outside the sandbox to pull arbitrary git repositories and read their files and history.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-11
Last Modified
2026-08-11
Generated
2026-08-11
AI Q&A
2026-08-11
EPSS Evaluated
N/A
NVD
CVE-2026-72770
EUVD
EUVD-2026-56096

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
n8n n8n to 1.123.67 (exc)
n8n n8n to 2.31.5 (exc)
n8n n8n to 2.32.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-72770 is a path traversal vulnerability in n8n versions before 1.123.67 affecting the Git node's fetch, pull, and push-tags operations. Authenticated users with workflow creation or execution rights can bypass repository-path restrictions by pointing allowlisted remote configurations to local paths outside the sandbox. This allows reading arbitrary files and Git history from local repositories.

Detection Guidance

Check n8n version with 'n8n --version' or inspect package.json. Look for unauthorized Git repository access in logs or file system changes outside expected directories. Monitor for suspicious workflows using Git node operations pointing to local paths.

Impact Analysis

Attackers with low privileges can exploit this to access sensitive files and repository history on the affected system. The vulnerability enables high confidentiality loss but does not impact system integrity or availability. Exploitation requires authenticated access with workflow rights.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, potentially violating GDPR (data protection) and HIPAA (health information privacy) by exposing confidential files and repository history. Organizations must patch to maintain compliance.

Mitigation Strategies

Upgrade n8n to version 1.123.67 or later immediately. Temporarily restrict workflow creation/execution to trusted users only. Disable the Git node if not required. Review and audit existing workflows for suspicious Git operations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72770. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart