Summary
Ein Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um seine Privilegien zu erhöhen, um Informationen offenzulegen, um Daten zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, und um beliebigen Programmcode auszuführen.
Product
n8n ist ein Workflow-Automatisierungstool, mit dem verschiedene Anwendungen und Dienste miteinander verbunden werden können, um Aufgaben zu automatisieren.
Vulnerabilities 1
-
High 8.9
n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution
n8n is an open source workflow automation platform. Prior to 1.123.64, 2.29.8, and 2.30.1, the Git node clone operation allows an authenticated workflow user to swap a validated directory for a symlink before cloning, planting a crafted repository in the comm…
Revision history
-
#2
Referenz(en) aufgenommen: CVE-2026-71539, EUVD-2026-60943, GHSA-62JR-CQGR-XMH7
-
#1
Initiale Fassung
References
-
n8n Releases vom 2026-07-08
https://github.com/n8n-io/n8n/releases
-
GitHub Security Advisory GHSA-33q9-f52j-gc75 vom 2026-07-08
https://github.com/n8n-io/n8n/security/advisories/GHSA-33q9-f52j-gc75
-
GitHub Security Advisory GHSA-35q8-9mj6-wjmf vom 2026-07-08
https://github.com/n8n-io/n8n/security/advisories/GHSA-35q8-9mj6-wjmf
-
GitHub Security Advisory GHSA-777w-rpr6-c52h vom 2026-07-08
https://github.com/n8n-io/n8n/security/advisories/GHSA-777w-rpr6-c52h
-
GitHub Security Advisory GHSA-89gh-3pgc-v5h2 vom 2026-07-08
https://github.com/n8n-io/n8n/security/advisories/GHSA-89gh-3pgc-v5h2
-
GitHub Security Advisory GHSA-9r8p-h6cc-6qhm vom 2026-07-08
https://github.com/n8n-io/n8n/security/advisories/GHSA-9r8p-h6cc-6qhm
-
GitHub Security Advisory GHSA-9w78-79q7-r4fp vom 2026-07-08
https://github.com/n8n-io/n8n/security/advisories/GHSA-9w78-79q7-r4fp
-
GitHub Security Advisory GHSA-9wcp-9r3j-383q vom 2026-07-08
https://github.com/n8n-io/n8n/security/advisories/GHSA-9wcp-9r3j-383q
-
GitHub Security Advisory GHSA-fpg6-x68q-5793 vom 2026-07-08
https://github.com/n8n-io/n8n/security/advisories/GHSA-fpg6-x68q-5793
-
GitHub Security Advisory GHSA-g3r5-9h93-4j2c vom 2026-07-08
https://github.com/n8n-io/n8n/security/advisories/GHSA-g3r5-9h93-4j2c
-
GitHub Security Advisory GHSA-gq66-9cw5-j5jm vom 2026-07-08
https://github.com/n8n-io/n8n/security/advisories/GHSA-gq66-9cw5-j5jm
-
GitHub Security Advisory GHSA-p3rg-hrf9-w9gj vom 2026-07-08
https://github.com/n8n-io/n8n/security/advisories/GHSA-p3rg-hrf9-w9gj
-
GitHub Security Advisory GHSA-pm35-fqvh-cq5g vom 2026-07-08
https://github.com/n8n-io/n8n/security/advisories/GHSA-pm35-fqvh-cq5g
-
GitHub Security Advisory GHSA-q5xf-xhwf-cwqf vom 2026-07-08
https://github.com/n8n-io/n8n/security/advisories/GHSA-q5xf-xhwf-cwqf
-
GitHub Security Advisory GHSA-x5vx-c2c8-m3w9 vom 2026-07-08
https://github.com/n8n-io/n8n/security/advisories/GHSA-x5vx-c2c8-m3w9