PT-2025-44432 · N8N · N8N

Assaf-Levkovich-Jf · Published 2025-10-30 · Updated 2025-12-31 · CVE-2025-62726

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.113.0

Description n8n is a workflow automation platform with a remote code execution issue in the Git Node component, affecting both Cloud and Self-Hosted versions. A malicious actor can exploit this by cloning a repository containing a pre-commit hook. Utilizing the Commit operation within the Git Node inadvertently triggers the hook, allowing the attacker to execute arbitrary code within the n8n environment. This could compromise the system and any associated credentials or workflows. The vulnerability impacts users with workflows that utilize the Git Node to clone untrusted repositories.

Recommendations Update to version 1.113.0 or later to resolve this issue. For self-hosted deployments, set the environment variable N8N GIT NODE DISABLE BARE REPOS to true. Avoid cloning or interacting with untrusted repositories using the Git Node. Disable or restrict the use of the Git Node in workflows where repository content cannot be fully trusted.

Exploit

Fix

RCE

Weakness Enumeration

CWE-829

Related Identifiers

CVE-2025-62726

GHSA-XGP7-7QJQ-VG47

Affected Products

N8N

References · 23

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/62xxx/CVE-2025-62726.json · Exploit
• https://github.com/n8n-io/n8n/commit/5bf3db5ba84d3195bbe11bbd3c62f7086e090997 · Patch
• https://github.com/n8n-io/n8n/security/advisories/GHSA-xgp7-7qjq-vg47 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-62726 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-xgp7-7qjq-vg47 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-62726 · Security Note
• https://github.com/n8n-io/n8n · Note
• https://github.com/n8n-io/n8n/pull/19559 · Note
• https://reddit.com/r/CVEWatch/comments/1pxosu8/top_10_trending_cves_28122025 · Reddit Post
• https://twitter.com/ZeroPathLabs/status/1983953677283950706 · Twitter Post
• https://t.me/CVEtracker/36208 · Telegram Post
• https://twitter.com/CveTodo/status/1983949108843872496 · Twitter Post
• https://reddit.com/r/VulnMatter/comments/1ol36t3/resumen_diario_de_vulnerabilidades_31102025 · Reddit Post
• https://twitter.com/CVEnew/status/1983939115662877166 · Twitter Post
• https://reddit.com/r/VulnMatter/comments/1ono2et/resumen_diario_de_vulnerabilidades_03112025 · Reddit Post